Received: from localhost (unknown [200.46.204.183])
	by mail.postgresql.org (Postfix) with ESMTP id 0DC1C6328AF
	for <pgsql-performance-postgresql.org@mail.postgresql.org>;
	Sun,  1 Mar 2009 14:40:18 -0400 (AST)
Received: from mail.postgresql.org ([200.46.204.86])
	by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024)
	with ESMTP id 65225-07
	for <pgsql-performance-postgresql.org@mail.postgresql.org>;
	Sun,  1 Mar 2009 14:40:14 -0400 (AST)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.6
Received: from svr2.hagander.net (svr2.hagander.net [88.198.128.226])
	by mail.postgresql.org (Postfix) with ESMTP id 56B72632393
	for <pgsql-performance@postgresql.org>;
	Sun,  1 Mar 2009 14:40:14 -0400 (AST)
Received: from dynamic.hagander.net ([127.0.0.1]) (encrypted and
	authenticated) by svr2.hagander.net (Postfix) with ESMTP id
	ECE2DDCD23E; Sun,  1 Mar 2009 19:40:11 +0100 (CET)
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by mha-laptop.hagander.net (Postfix) with ESMTP id 4C11817021A;
	Sun,  1 Mar 2009 19:40:11 +0100 (CET)
Message-ID: <49AAD68A.2090308@hagander.net>
Date: Sun, 01 Mar 2009 19:40:10 +0100
From: Magnus Hagander <magnus@hagander.net>
User-Agent: Thunderbird 2.0.0.19 (X11/20090105)
MIME-Version: 1.0
To: Tom Lane <tgl@sss.pgh.pa.us>
CC: Linos <info@linos.es>, "Ross J. Reedstrom" <reedstrm@rice.edu>,
	pgsql-performance@postgresql.org
Subject: Re: TCP network cost
References: <1ca1c1410902171013q478f2620n13fcd68cb8b3d911@mail.gmail.com>
	<20090217070403.GB2486@cooker>
	<3FAF940B-9B0B-4DBA-8728-6096022129DF@infogears.com>
	<alpine.DEB.1.10.0902170032440.25606@asgard.lang.hm>
	<20090217070403.GB2486@cooker>
	<3FAF940B-9B0B-4DBA-8728-6096022129DF@infogears.com>
	<20090217200416.GA23707@cooker> <87hc2r272g.fsf@oxford.xeocode.com>
	<20090223194212.GA14802@cooker> <27042.1235423820@sss.pgh.pa.us>
	<20090224170201.GA25420@cooker> <49AAC6AC.60309@linos.es>
	<13121.1235929398@sss.pgh.pa.us> <49AACC6F.7080809@linos.es>
	<13505.1235931000@sss.pgh.pa.us> <49AAD1CF.6000908@linos.es>
	<13742.1235932104@sss.pgh.pa.us>
In-Reply-To: <13742.1235932104@sss.pgh.pa.us>
X-Enigmail-Version: 0.95.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none
X-Spam-Level: 
X-Archive-Number: 200903/8
X-Sequence-Number: 32930

Tom Lane wrote:
> Linos <info@linos.es> writes:
>> Tom Lane escribió:
>>> That's just weird --- ssl off should be ssl off no matter which knob you
>>> use to turn it off.  Are you sure it's really off in the slow connections?
> 
>> Maybe i am missing something, i use the same command to connect to it
>> from localhost "psql -d database -h localhost" and in the pcap files i
>> have captured the protocol it is clear (with "ssl = false" or "ssl =
>> true" either), but in the debian machine with "ssl = true" in
>> postgresql.conf you can see in the pcap file big time jumps between
>> data packets, psql commandline enables automatically ssl if the server
>> supports it?
> 
> Yeah, the default behavior is to do SSL if supported; see PGSSLMODE.
> Non-TCP connections never do SSL, though.  One possibility to check
> is that one of the two distros has altered the default value of
> PGSSLMODE.

IIRC, debian ships with a default certificate for the postgres
installation, so it can actually *use* SSL by default. I don't know if
other distros do that - I think most require you to actually create a
certificate yourself.

//Magnus