Hello, On Mon, Feb 16, 2009 at 4:42 PM, Arno Garrels <[email protected]> wrote: > > Fastream Technologies wrote: > > Ok. I made it "IQRP". It seems to work with functions being called but > > despite the server consuming 90% CPU (dual core), the performance is > > still at 20 connections/sec! > > Make sure session caching is working, it can notably increase the > maximum number of plain accepts per second. Note that the client must > support session caching as well, otherwise it would work. However most > common browsers support it.
Ok. Do you have a tool that is capable of sess. caching and web stress testing? I used my own web stress tester but that is not capable of it right now! > > > This is far lower than hw accelarators. Any idea? > > I have no idea how fast hardware accelerators actually are. What about 1000SSL-TPS!!!? We need to support OpenSSL hardware PCI cards but I am unable to find one here to test. I suggest us to launch a project similar to the ICS-SSL project back in 2003 (which succeeded!) and gather some funds for this. Or maybe a volunteer "here" would stand up with his acc. card to test!?? Regards, SZ > > -- > Arno Garrels > > > > > > On Mon, Feb 16, 2009 at 3:44 PM, Arno Garrels <[email protected]> > > wrote: > > > >> Fastream Technologies wrote: > >>> Where is Ssl_Session_ID_Context defined in ICSv6?? Can't find it! > >> > >> It is an arbitrary custom string defined as a const in demo. > >> You can have multiple of those strings associated with different > >> resources. > >> > >> -- > >> Arno Garrels > >> > >>> > >>> On Mon, Feb 16, 2009 at 12:57 PM, Arno Garrels <[email protected]> > >>> wrote: > >>> > >>>> You have to use FMyExternalSslSessionCache->GetSvrSession() and > >>>> FMyExternalSslSessionCache->CacheSvrSession()! > >>>> It is also required to set the SslContest.SslSessionCacheModes > >>>> properly: > >>>> > >>>> > >> [sslSESS_CACHE_SERVER,sslSESS_CACHE_NO_INTERNAL_LOOKUP,sslSESS_CACHE_NO_INTERNAL_STORE] > >>>> > >>>> Delphi code: > >>>> > >>>> {* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * > >>>> * * * * *} > >>>> procedure TSslWebServForm.SslHttpServer1SslSetSessionIDContext( > >>>> Sender : TObject; > >>>> var SessionIDContext : String); > >>>> begin > >>>> { Tell Openssl a Session_ID_Context. > >>>> } > >>>> { Openssl uses this data to tag a session before it's cached. > >>>> } > >>>> { It's an arbitrary custom string > >>>> } > >>>> SessionIDContext := Ssl_Session_ID_Context; > >>>> end; > >>>> > >>>> > >>>> {* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * > >>>> * * * * *} > >>>> procedure TSslWebServForm.SslHttpServer1SslSvrGetSession( > >>>> Sender : TObject; > >>>> var SslSession : Pointer; > >>>> SessId : Pointer; > >>>> Idlen : Integer; > >>>> var IncRefCount : Boolean); > >>>> var > >>>> LookupKey : string; > >>>> begin > >>>> SetLength(LookupKey, IDLen); > >>>> Move(SessId^, Pointer(LookupKey)^, IDLen); > >>>> SslSession := SslAvlSessionCache1.GetSvrSession(LookupKey + > >>>> > >>>> > >>>> Ssl_Session_ID_Context, IncRefCount); > >>>> end; > >>>> > >>>> > >>>> {* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * > >>>> * * * * *} > >>>> procedure TSslWebServForm.SslHttpServer1SslSvrNewSession( > >>>> Sender : TObject; > >>>> SslSession, > >>>> SessId : Pointer; > >>>> Idlen : Integer; > >>>> var AddToInternalCache : Boolean); > >>>> var > >>>> LookupKey : string; > >>>> begin > >>>> SetLength(LookupKey, IDLen); > >>>> Move(SessId^, Pointer(LookupKey)^, IDLen); > >>>> SslAvlSessionCache1.CacheSvrSession(SslSession, > >>>> LookupKey + > >>>> Ssl_Session_ID_Context, > >>>> AddToInternalCache); if DisplaySslInfoCheckBox.Checked then > >>>> Display('[' + FormatDateTime('HH:NN:SS', Now) + ' ' + > >>>> TWSocket(Sender).GetPeerAddr + '] New SSL session > >>>> created and ' + > >>>> 'cached in external cache class.'); > >>>> end; > >>>> > >>>> > >>>> {* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * > >>>> * * * * *} -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
