Subject: RE: mod_ssl performance problems - FreeBSD - msg#00007

Previous Message by Date: click to view message preview

RE: mod_ssl performance problems - FreeBSD

What hardwre are you using for the client and the server?  are you running ab from localhost?  What options are you using with ab?   Most of the CPU cycles in each transaction are going to be spent in the SSL handshake.  I just did a quick test of one of my servers running 1.3.37 on a dual Xeon 3.06, using a P4-3.2 as the client, and saw about 5000rps for HTTP, and 24 for HTTPS.  I suspect that the latter may represent the capabilities of my client machine rather than the server machine.   If you want fast SSL, you need hardware acceleration.  From: owner-modssl-users@xxxxxxxxxx [mailto:owner-modssl-users@xxxxxxxxxx] On Behalf Of Tim LovelaceSent: Sunday, March 25, 2007 7:54 AMTo: modssl-users@xxxxxxxxxxSubject: mod_ssl performance problems - FreeBSD Hello,   I am having some issues with my SSL implementation on a FreeBSD 6.2-RELEASE system. I am currently running the following software   Server Version: Apache/1.3.37 (Unix) PHP/5.1.6 with Suhosin-Patch mod_ssl/2.8.28 OpenSSL/0.9.7e-p1   All built from ports. In testing of the web application I noticed that once SSL was added the initial login to the site was slowing down. I did some testing using Apache Bench and have noticed that without SSL the server can process about 700 requests per second. Using SSL the number is in the 13-15 range. I have tried changing a few parameters (log level, SSLRandomSeed, SSLSessionCache) and have seen 0 improvement. Using server_status shows that there are plenty of resources available. Any help would be appreciated.     Tim

Next Message by Date: click to view message preview

RE: mod_ssl performance problems - FreeBSD

The cipher you allow will have a big impact on performance.Tim Lovelace <timl@xxxxxxxxxxxxxxx> wrote: Thanks for the response. Although I expected a pretty decent differencebetween HTTP and HTTPS I didn?t realize it would be so significant. Bothmachines are small P3 2ghz boxes, the client side is running Ubuntu. Theyare connected to the same switch. For the ab options I am runningab -n 1000 -c 100 ?s https://targethostI can live with the low tps count assuming that the speed was a littlebetter. I have seen some of the initial connections take from 5-10 secondsto setup. Is there some good general tuning I should try out?ThanksTim ________________________________________From: owner-modssl-users@xxxxxxxxxx [mailto:owner-modssl-users@xxxxxxxxxx]On Behalf Of lusky@xxxxxxxxxxxxxxxSent: Sunday, March 25, 2007 11:14 AMTo: modssl-users@xxxxxxxxxxCc: timl@xxxxxxxxxxxxxxxSubject: RE: mod_ssl performance problems - FreeBSDWhat hardwre are you using for the client and the server?  are you runningab from localhost?  What options are you using with ab? Most of the CPU cycles in each transaction are going to be spent in the SSLhandshake.  I just did a quick test of one of my servers running 1.3.37 on adual Xeon 3.06, using a P4-3.2 as the client, and saw about 5000rpsfor HTTP, and 24 for HTTPS.  I suspect that the latter may represent thecapabilities of my client machine rather than the server machine. If you want fast SSL, you need hardware acceleration.  ________________________________________From: owner-modssl-users@xxxxxxxxxx [mailto:owner-modssl-users@xxxxxxxxxx]On Behalf Of Tim LovelaceSent: Sunday, March 25, 2007 7:54 AMTo: modssl-users@xxxxxxxxxxSubject: mod_ssl performance problems - FreeBSDHello,I am having some issues with my SSL implementation on a FreeBSD 6.2-RELEASEsystem. I am currently running the following softwareServer Version: Apache/1.3.37 (Unix) PHP/5.1.6 with Suhosin-Patchmod_ssl/2.8.28 OpenSSL/0.9.7e-p1All built from ports. In testing of the web application I noticed that onceSSL was added the initial login to the site was slowing down. I did sometesting using Apache Bench and have noticed that without SSL the server canprocess about 700 requests per second. Using SSL the number is in the 13-15range. I have tried changing a few parameters (log level, SSLRandomSeed,SSLSessionCache) and have seen 0 improvement. Using server_status shows thatthere are plenty of resources available. Any help would be appreciated.Tim______________________________________________________________________Apache Interface to OpenSSL (mod_ssl) www.modssl.orgUser Support Mailing List modssl-users@xxxxxxxxxxAutomated List Manager majordomo@xxxxxxxxxx TV dinner still cooling?Check out "Tonight's Picks" on Yahoo! TV.

Previous Message by Thread: click to view message preview

RE: mod_ssl performance problems - FreeBSD

What hardwre are you using for the client and the server?  are you running ab from localhost?  What options are you using with ab?   Most of the CPU cycles in each transaction are going to be spent in the SSL handshake.  I just did a quick test of one of my servers running 1.3.37 on a dual Xeon 3.06, using a P4-3.2 as the client, and saw about 5000rps for HTTP, and 24 for HTTPS.  I suspect that the latter may represent the capabilities of my client machine rather than the server machine.   If you want fast SSL, you need hardware acceleration.  From: owner-modssl-users@xxxxxxxxxx [mailto:owner-modssl-users@xxxxxxxxxx] On Behalf Of Tim LovelaceSent: Sunday, March 25, 2007 7:54 AMTo: modssl-users@xxxxxxxxxxSubject: mod_ssl performance problems - FreeBSD Hello,   I am having some issues with my SSL implementation on a FreeBSD 6.2-RELEASE system. I am currently running the following software   Server Version: Apache/1.3.37 (Unix) PHP/5.1.6 with Suhosin-Patch mod_ssl/2.8.28 OpenSSL/0.9.7e-p1   All built from ports. In testing of the web application I noticed that once SSL was added the initial login to the site was slowing down. I did some testing using Apache Bench and have noticed that without SSL the server can process about 700 requests per second. Using SSL the number is in the 13-15 range. I have tried changing a few parameters (log level, SSLRandomSeed, SSLSessionCache) and have seen 0 improvement. Using server_status shows that there are plenty of resources available. Any help would be appreciated.     Tim

Next Message by Thread: click to view message preview

RE: mod_ssl performance problems - FreeBSD

The cipher you allow will have a big impact on performance.Tim Lovelace <timl@xxxxxxxxxxxxxxx> wrote: Thanks for the response. Although I expected a pretty decent differencebetween HTTP and HTTPS I didn?t realize it would be so significant. Bothmachines are small P3 2ghz boxes, the client side is running Ubuntu. Theyare connected to the same switch. For the ab options I am runningab -n 1000 -c 100 ?s https://targethostI can live with the low tps count assuming that the speed was a littlebetter. I have seen some of the initial connections take from 5-10 secondsto setup. Is there some good general tuning I should try out?ThanksTim ________________________________________From: owner-modssl-users@xxxxxxxxxx [mailto:owner-modssl-users@xxxxxxxxxx]On Behalf Of lusky@xxxxxxxxxxxxxxxSent: Sunday, March 25, 2007 11:14 AMTo: modssl-users@xxxxxxxxxxCc: timl@xxxxxxxxxxxxxxxSubject: RE: mod_ssl performance problems - FreeBSDWhat hardwre are you using for the client and the server?  are you runningab from localhost?  What options are you using with ab? Most of the CPU cycles in each transaction are going to be spent in the SSLhandshake.  I just did a quick test of one of my servers running 1.3.37 on adual Xeon 3.06, using a P4-3.2 as the client, and saw about 5000rpsfor HTTP, and 24 for HTTPS.  I suspect that the latter may represent thecapabilities of my client machine rather than the server machine. If you want fast SSL, you need hardware acceleration.  ________________________________________From: owner-modssl-users@xxxxxxxxxx [mailto:owner-modssl-users@xxxxxxxxxx]On Behalf Of Tim LovelaceSent: Sunday, March 25, 2007 7:54 AMTo: modssl-users@xxxxxxxxxxSubject: mod_ssl performance problems - FreeBSDHello,I am having some issues with my SSL implementation on a FreeBSD 6.2-RELEASEsystem. I am currently running the following softwareServer Version: Apache/1.3.37 (Unix) PHP/5.1.6 with Suhosin-Patchmod_ssl/2.8.28 OpenSSL/0.9.7e-p1All built from ports. In testing of the web application I noticed that onceSSL was added the initial login to the site was slowing down. I did sometesting using Apache Bench and have noticed that without SSL the server canprocess about 700 requests per second. Using SSL the number is in the 13-15range. I have tried changing a few parameters (log level, SSLRandomSeed,SSLSessionCache) and have seen 0 improvement. Using server_status shows thatthere are plenty of resources available. Any help would be appreciated.Tim______________________________________________________________________Apache Interface to OpenSSL (mod_ssl) www.modssl.orgUser Support Mailing List modssl-users@xxxxxxxxxxAutomated List Manager majordomo@xxxxxxxxxx TV dinner still cooling?Check out "Tonight's Picks" on Yahoo! TV.