Received: from localhost (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id 2EB4563303D for ; Sun, 1 Mar 2009 14:28:33 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 54034-04 for ; Sun, 1 Mar 2009 14:28:30 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by mail.postgresql.org (Postfix) with ESMTP id 29A43632DCC for ; Sun, 1 Mar 2009 14:28:29 -0400 (AST) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id n21ISO0j013743; Sun, 1 Mar 2009 13:28:24 -0500 (EST) To: Linos cc: "Ross J. Reedstrom" , pgsql-performance@postgresql.org Subject: Re: TCP network cost In-reply-to: <49AAD1CF.6000908@linos.es> References: <1ca1c1410902171013q478f2620n13fcd68cb8b3d911@mail.gmail.com> <20090217070403.GB2486@cooker> <3FAF940B-9B0B-4DBA-8728-6096022129DF@infogears.com> <20090217070403.GB2486@cooker> <3FAF940B-9B0B-4DBA-8728-6096022129DF@infogears.com> <20090217200416.GA23707@cooker> <87hc2r272g.fsf@oxford.xeocode.com> <20090223194212.GA14802@cooker> <27042.1235423820@sss.pgh.pa.us> <20090224170201.GA25420@cooker> <49AAC6AC.60309@linos.es> <13121.1235929398@sss.pgh.pa.us> <49AACC6F.7080809@linos.es> <13505.1235931000@sss.pgh.pa.us> <49AAD1CF.6000908@linos.es> Comments: In-reply-to Linos message dated "Sun, 01 Mar 2009 19:19:59 +0100" Date: Sun, 01 Mar 2009 13:28:24 -0500 Message-ID: <13742.1235932104@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200903/7 X-Sequence-Number: 32929 Linos writes: > Tom Lane escribió: >> That's just weird --- ssl off should be ssl off no matter which knob you >> use to turn it off. Are you sure it's really off in the slow connections? > Maybe i am missing something, i use the same command to connect to it > from localhost "psql -d database -h localhost" and in the pcap files i > have captured the protocol it is clear (with "ssl = false" or "ssl = > true" either), but in the debian machine with "ssl = true" in > postgresql.conf you can see in the pcap file big time jumps between > data packets, psql commandline enables automatically ssl if the server > supports it? Yeah, the default behavior is to do SSL if supported; see PGSSLMODE. Non-TCP connections never do SSL, though. One possibility to check is that one of the two distros has altered the default value of PGSSLMODE. > but if this is the case i should see encrypted traffic in > pcap files, I would suppose so, so there's something that doesn't quite add up here. regards, tom lane