Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id DC5BF2E01B8 for ; Mon, 11 Feb 2008 21:03:35 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 79879-01-8 for ; Mon, 11 Feb 2008 21:03:33 -0400 (AST) Received: from tigger.fuhr.org (tigger.fuhr.org [63.214.45.158]) by postgresql.org (Postfix) with ESMTP id 1B4272E0304 for ; Mon, 11 Feb 2008 21:00:19 -0400 (AST) Received: from winnie.fuhr.org (winnie.fuhr.org [10.1.0.1]) by tigger.fuhr.org (8.13.8/8.13.8) with ESMTP id m1C10EST066818 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 11 Feb 2008 18:00:16 -0700 (MST) Received: from winnie.fuhr.org (localhost [127.0.0.1]) by winnie.fuhr.org (8.14.2/8.14.2) with ESMTP id m1C10DJ8042276; Mon, 11 Feb 2008 18:00:13 -0700 (MST) (envelope-from mfuhr@winnie.fuhr.org) Received: (from mfuhr@localhost) by winnie.fuhr.org (8.14.2/8.14.2/Submit) id m1C10Dvi042275; Mon, 11 Feb 2008 18:00:13 -0700 (MST) (envelope-from mfuhr) Date: Mon, 11 Feb 2008 18:00:13 -0700 From: Michael Fuhr To: fabrix =?iso-8859-1?Q?pe=F1uelas?= Cc: pgsql-performance@postgresql.org Subject: Re: Questions about enabling SSL Message-ID: <20080212010012.GA42187@winnie.fuhr.org> References: <20080212003751.GA42006@winnie.fuhr.org> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20080212003751.GA42006@winnie.fuhr.org> X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200802/110 X-Sequence-Number: 28652 On Mon, Feb 11, 2008 at 05:37:51PM -0700, Michael Fuhr wrote: > On Mon, Feb 11, 2008 at 04:58:35PM -0700, fabrix peñuelas wrote: > > If ssl is enable in postgresql decreanse the performance of the database? > > How much? > > The performance impact of an encrypted connection depends on how > expensive the queries are and how much data they return. Another consideration is how much time you spend using each connection vs. how much time it takes to establish each connection. A thousand simple queries over the same encrypted connection might be significantly faster than running each query over a separate unencrypted connection, which in turn will probably be significantly faster than using separate encrypted connections that must each carry out a relatively expensive key establishment. -- Michael Fuhr