SSL Performance

[Scott Battaglia]

How powerful is the machine you are running on?

In general, you could see a significant decrease in performance when
enabling SSL depending on the hardware. We did some load testing on a single
CPU machine with SSL enabled and were getting poor performance (Apache was
taking up about 80% of the CPU cycles).  We off-loaded that to a dedicated
hardware SSL Accelerator and saw a significant increase in performance.
Unfortunately, I'm at home so I don't have the numbers with me.

But yes, your numbers are probably reflecting reality correctly as far as
what I have seen in our testing.

-Scott

On 3/9/07, Patrick Berry <pberry at csuchico.edu> wrote:
>
> Apologies in advance, I know this is a topic (SSL) this is greatly
> misunderstood and generates more than it's fair share of questions.
> We've never had a problem with CAS 2 performance, even though we run
> tomcat 5.0.28 with nothing in front on JDK 1.4.2.  We foolishly never did
> any baseline performance testing with httperf.  We finally ran into a
> problem and started to do some testing.
>
> It came down to this, just hitting /cas/login :
> SSL: 11 connection/sec
> No SSL: 150+ connections/sec
>
> Question: Is this basically what others see?
>
> I know the solutions, upgrade JVM, upgrade tomcat, upgrade CAS, cluster
> CAS, offload SSL and I'll get there eventually.  I mainly just want to see
> if my tests reflect reality (not just my own reality).
>
> Cheers,
> Pat
>
> --
> Web Application Development
> CSU, Chico | http://www.csuchico.edu/
>
>
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>


-- 
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070310/6e706a66/attachment.html