RE: newbie question

Hi Diarmuid,


> What are you trying to test?  Transaction rate...throughput?  Any
> particular cipher suite?

I am more interseted in the throughput and I forgot to mention that I will 
using either iperf or nttcp to test the performance of SSL.
and regarding the cipher suite it is just the normal session cipher like 
SSL_RSA_WITH_3DES_EDE_CBC_SHA or SSL_RSA_WITH_RC4_128_SHA

> Of course, if you're using big asymmetric keys
> then your bottle neck is the public key cryptography.

I am aware of the bottle neck when it comes to public key cryptography.

> Maybe you'll only
> be using cached SSL sessions though?  If its transactions you're
> interested and the RSA maths isn't an issue, stunnel might not be the
> best choice.  It forks/threads for every new connection and this can
> slow things down a bit.

Is there any other way to get an accurate result when it comes to 
transactions and SSL

> If you're more interested in sustained
> connections with large amounts of data being moved, stunnel is perfect
> for your tests.
>
> Bottom line is that there is many issues that effect SSL performance.

Regards

Bukhatir

_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE* 
http://join.msn.com/?page=features/virus