Re: [twsocket] OpenSSL hardware accelerators
I got compiler errors when I last tried to integrate the avl cache! Can you send me a C++ example? Regards, SZ On Sun, Feb 15, 2009 at 7:50 PM, Arno Garrels arno.garr...@gmx.de wrote: Fastream Technologies wrote: Currently I get 20 SSL TPS local-to-local. When keep-alive is enabled, this goes up to 2000. Do you use a SSL session cache, either the built-in OpenSSl session cache or (IMHO faster) the ICS AVL session cache? -- Arno Garrels -- -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
[twsocket] OpenSSL hardware accelerators
Hello, Has anybody found the chance to test ICS-SSL on one of those? What's needed to make sure they (sw+hw) are cooperating? I think this issue is getting more and more important every day, agree? Currently I get 20 SSL TPS local-to-local. When keep-alive is enabled, this goes up to 2000. Best Regards, SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] OpenSSL hardware accelerators
What exactly do you mean ? Our hosting company installed a hardware SSL offloader. The server is now http server instead of https. Works exactly as before. No problems with the clients Paul - Original Message - From: Fastream Technologies ga...@fastream.com To: ICS support mailing twsocket@elists.org Sent: Sunday, February 15, 2009 4:24 PM Subject: [twsocket] OpenSSL hardware accelerators Hello, Has anybody found the chance to test ICS-SSL on one of those? What's needed to make sure they (sw+hw) are cooperating? I think this issue is getting more and more important every day, agree? Currently I get 20 SSL TPS local-to-local. When keep-alive is enabled, this goes up to 2000. Best Regards, SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] OpenSSL hardware accelerators
Hello, Sorry for being ambigous. I want the __OpenSSL accelerator_ on the _host_ to speed up ICS FTPS/HTTPS server. HTH. Regards, SZ On Sun, Feb 15, 2009 at 6:55 PM, Paul paul.blommae...@telenet.be wrote: What exactly do you mean ? Our hosting company installed a hardware SSL offloader. The server is now http server instead of https. Works exactly as before. No problems with the clients Paul - Original Message - From: Fastream Technologies ga...@fastream.com To: ICS support mailing twsocket@elists.org Sent: Sunday, February 15, 2009 4:24 PM Subject: [twsocket] OpenSSL hardware accelerators Hello, Has anybody found the chance to test ICS-SSL on one of those? What's needed to make sure they (sw+hw) are cooperating? I think this issue is getting more and more important every day, agree? Currently I get 20 SSL TPS local-to-local. When keep-alive is enabled, this goes up to 2000. Best Regards, SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] OpenSSL hardware accelerators
Then this is a good but very expensive choise. The speed increase was visible. But the accelerator they have costs about 20.000 ? Paul -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] OpenSSL hardware accelerators
Fastream Technologies wrote: Currently I get 20 SSL TPS local-to-local. When keep-alive is enabled, this goes up to 2000. Do you use a SSL session cache, either the built-in OpenSSl session cache or (IMHO faster) the ICS AVL session cache? -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] OpenSSL hardware accelerators
Do you use a SSL session cache, either the built-in OpenSSl session cache or (IMHO faster) the ICS AVL session cache? Would that help for the keep-alives ? Paul btw: I can see the keep-alive (httpcli) working after 5 seconds and afterwards 2 times per second. -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] OpenSSL hardware accelerators
Paul wrote: Do you use a SSL session cache, either the built-in OpenSSl session cache or (IMHO faster) the ICS AVL session cache? Would that help for the keep-alives ? No, only with non-persistent connections since just the SSL handshake becomes faster. Paul btw: I can see the keep-alive (httpcli) working after 5 seconds and afterwards 2 times per second. I don't understand? -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] OpenSSL hardware accelerators
I don't understand? Last week, I got complaints about a user that there was too much traffic in wait state. The HttpCli checks for comands on a server, but if there is nothing available, the server keeps the connection open for 20s before answering. I checked the traffic between client-server and see there is no traffic for the first 5 seconds after the client's request. After that , there is about 1.6kb/s traffic while waiting for an answer from the server. Paul -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] OpenSSL hardware accelerators
Paul wrote: I don't understand? Last week, I got complaints about a user that there was too much traffic in wait state. The HttpCli checks for comands on a server, OK, got it ;-) but if there is nothing available, the server keeps the connection open for 20s before answering. If there is nothing available it sounds correct. I checked the traffic between client-server and see there is no traffic for the first 5 seconds after the client's request. Sounds correct as well in case there's nothing to serve to the client. After that , there is about 1.6kb/s traffic while waiting for an answer from the server. What actually is the problem? Looks like other clients are served. I still don't get it? Is the server THttpServer? -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] OpenSSL hardware accelerators
Both client and server are ICS (application server) Client asks server for the next command that the client should execute locally. If the server has no command available for the client, he postpones the answer for 20 seconds. During that 20 seconds, there should no communication between client-server since the client is just waiting. This goes well for the first 5 seconds, and then there is a communication of about 1.6 kb/sec (client side), That 5 seconds seems natural, since the connection is keep-alive. The communication after the first 5 seconds is not. Paul - Original Message - From: Arno Garrels arno.garr...@gmx.de To: ICS support mailing twsocket@elists.org Sent: Sunday, February 15, 2009 8:10 PM Subject: Re: [twsocket] OpenSSL hardware accelerators Paul wrote: I don't understand? Last week, I got complaints about a user that there was too much traffic in wait state. The HttpCli checks for comands on a server, OK, got it ;-) but if there is nothing available, the server keeps the connection open for 20s before answering. If there is nothing available it sounds correct. I checked the traffic between client-server and see there is no traffic for the first 5 seconds after the client's request. Sounds correct as well in case there's nothing to serve to the client. After that , there is about 1.6kb/s traffic while waiting for an answer from the server. What actually is the problem? Looks like other clients are served. I still don't get it? Is the server THttpServer? -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
