pg.ddx.io  pgsql-performance@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Magnus Hagander <magnus@hagander.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Linos <info@linos.es>
Cc: Ross J. Reedstrom <reedstrm@rice.edu>
Cc: pgsql-performance@postgresql.org
Subject: Re: TCP network cost
Date: Sun, 01 Mar 2009 19:40:10 +0100
Message-ID: <49AAD68A.2090308@hagander.net> (raw)
In-Reply-To: <13742.1235932104@sss.pgh.pa.us>
References: <1ca1c1410902171013q478f2620n13fcd68cb8b3d911@mail.gmail.com>
	<20090217070403.GB2486@cooker>
	<3FAF940B-9B0B-4DBA-8728-6096022129DF@infogears.com>
	<alpine.DEB.1.10.0902170032440.25606@asgard.lang.hm>
	<20090217070403.GB2486@cooker>
	<3FAF940B-9B0B-4DBA-8728-6096022129DF@infogears.com>
	<20090217200416.GA23707@cooker>
	<87hc2r272g.fsf@oxford.xeocode.com>
	<20090223194212.GA14802@cooker>
	<27042.1235423820@sss.pgh.pa.us>
	<20090224170201.GA25420@cooker>
	<49AAC6AC.60309@linos.es>
	<13121.1235929398@sss.pgh.pa.us>
	<49AACC6F.7080809@linos.es>
	<13505.1235931000@sss.pgh.pa.us>
	<49AAD1CF.6000908@linos.es>
	<13742.1235932104@sss.pgh.pa.us>

Tom Lane wrote:
> Linos <info@linos.es> writes:
>> Tom Lane escribió:
>>> That's just weird --- ssl off should be ssl off no matter which knob you
>>> use to turn it off.  Are you sure it's really off in the slow connections?
> 
>> Maybe i am missing something, i use the same command to connect to it
>> from localhost "psql -d database -h localhost" and in the pcap files i
>> have captured the protocol it is clear (with "ssl = false" or "ssl =
>> true" either), but in the debian machine with "ssl = true" in
>> postgresql.conf you can see in the pcap file big time jumps between
>> data packets, psql commandline enables automatically ssl if the server
>> supports it?
> 
> Yeah, the default behavior is to do SSL if supported; see PGSSLMODE.
> Non-TCP connections never do SSL, though.  One possibility to check
> is that one of the two distros has altered the default value of
> PGSSLMODE.

IIRC, debian ships with a default certificate for the postgres
installation, so it can actually *use* SSL by default. I don't know if
other distros do that - I think most require you to actually create a
certificate yourself.

//Magnus




view thread (23+ messages)  latest in thread

Message-ID: <49AAD68A.2090308@hagander.net>
Permalink:  ../49AAD68A.2090308@hagander.net/
Also on:    postgresql.org/message-id/49AAD68A.2090308@hagander.net

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-performance@postgresql.org
  Cc: magnus@hagander.net, tgl@sss.pgh.pa.us, info@linos.es, reedstrm@rice.edu
  Subject: Re: TCP network cost
  In-Reply-To: <49AAD68A.2090308@hagander.net>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox