Welcome! Log In Create A New Profile

Advanced

Re: [RFC] event/openssl: Add dynamic record size support for serving ssl trafic

June 01, 2015 09:06PM
Mark,

From memory SSL_CIPHER_is_AES is a BoringSSL addition isnt it? I did a
quick look over the OpenSSL source and it does not seem like its been added
either.

I havent had a chance to compile this yet to confirm it, but if correct
then this is not compatible with OpenSSL and possibly other SSL libraries.

Regards,
Mathew



On Thu, May 28, 2015 at 2:43 AM, W-Mark Kubacki <wmark+nginx@hurrikane.de>
wrote:

> 2015-05-05 15:39 GMT+02:00 chen <gzchenym@126.com>:
> >
> > This is v1 of the patchset the implementing the feature SSL Dynamic
> Record
> > Sizing, inspiring by Google Front End […]
> >
> > Any comments is welcome.
>
> Nice! I've implemented that for Golang in the past and have ported it
> to C for you today.
>
> Although a single initial packet might seem more attractive in
> benchmarks, I found that sending two results in better catching parts
> of HEAD — which is what we want. Then you will notice some dancing
> around IW4, by which we've already sent about 5683 octets. Enough for
> me for a making a tradeoff here.
>
> 16k as ssl->buffer_size results in partially filled packets. A better
> default value could minimize the overhead (<0.5%) for that trailing
> PDUs.
>
> SSL libraries really should provide a function for computing overhead.
>
> --
> Mark
>
> _______________________________________________
> nginx-devel mailing list
> nginx-devel@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx-devel
>
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel
Subject Author Views Posted

[RFC] event/openssl: Add dynamic record size support for serving ssl trafic

gzchenym 1010 May 05, 2015 09:40AM

Re: [RFC] event/openssl: Add dynamic record size support for serving ssl trafic

Ilya Grigorik 430 May 12, 2015 11:00AM

Re: [RFC] event/openssl: Add dynamic record size support for serving ssl trafic

splitice 522 May 13, 2015 12:58AM

Re: [RFC] event/openssl: Add dynamic record size support for serving ssl trafic Attachments

W-Mark Kubacki 452 May 27, 2015 12:44PM

Re: [RFC] event/openssl: Add dynamic record size support for serving ssl trafic

splitice 446 June 01, 2015 09:06PM

Re: [RFC] event/openssl: Add dynamic record size support for serving ssl trafic

W-Mark Kubacki 417 June 02, 2015 02:16PM

Re: [RFC] event/openssl: Add dynamic record size support for serving ssl trafic

splitice 407 June 01, 2015 09:08PM



Sorry, you do not have permission to post/reply in this forum.

Online Users

Guests: 62
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready