Welcome! Log In Create A New Profile

Advanced

Re: Occupancy of SSL connections?

November 09, 2009 02:44PM
On Mon, Nov 09, 2009 at 05:34:12PM +0000, Edward Hibbert wrote:

> Sorry, typo. "takes about 1GB for 10L connections" should have read "takes about 1GB for 10K connections", i.e. almost an order of magnitude more than without SSL.

According to ktrace, OpenSSL takes about 80K per connection just on
the handshake phase.

> -----Original Message-----
> From: Edward Hibbert
> Sent: 09 November 2009 17:29
> To: 'nginx@sysoev.ru'
> Cc: 'Leo P.'
> Subject: Occupancy of SSL connections?
>
> Has anyone done any measurement of SSL occupancy with NGINX, both for the existance of an SSL connection and for an outstanding request?
>
> I'm doing development on COMET polls, where a GET request is outstanding in the server for a long period. This is using Leo's module (http://github.com/slact/nginx_http_push_module).
>
> For HTTP connections, I can get about 20K connections and outstanding requests in 116MB, which is pretty respectable.
>
> However with HTTPS, what I see is that:
> - having the connection open takes 261MB for about 16K connections
> - having the connection open with an outstanding request takes about 1GB for 10L connections.
>
> So the occupancy hit for an outstanding HTTPS request is much higher than for HTTP. I'd be surprised if the extra occupancy is in Leo's module, because I'd expect that to be isolated from whether the connection is SSL or not.
>
> I don't have 100% confidence in these numbers, but they should be roughly right. Can anyone think of why an outstanding request might consume a lot of memory in HTTPS compared to HTTP? Has anyone done anything similar?
>
> Thanks,
>
> Edward

--
Igor Sysoev
http://sysoev.ru/en/
Subject Author Posted

Occupancy of SSL connections?

Edward Hibbert November 09, 2009 12:36PM

RE: Occupancy of SSL connections?

Edward Hibbert November 09, 2009 12:40PM

Re: Occupancy of SSL connections?

Igor Sysoev November 09, 2009 02:44PM

Re: Occupancy of SSL connections?

edwh2 November 11, 2009 06:03AM

Re: Occupancy of SSL connections?

edwh2 November 12, 2009 09:15AM

Re: Occupancy of SSL connections?

Maxim Dounin November 12, 2009 10:54AM

Re: Occupancy of SSL connections?

edwh2 November 12, 2009 01:11PM

Re: Occupancy of SSL connections?

Maxim Dounin November 12, 2009 07:28PM

Re: Occupancy of SSL connections?

Cliff Wells November 09, 2009 01:10PM

Re: Occupancy of SSL connections?

Cliff Wells November 09, 2009 01:18PM

Re: Occupancy of SSL connections?

edwh2 November 11, 2009 06:18AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 238
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready