Message-ID: <4EB459FF.9010601@enterprisedb.com>
Date: Fri, 04 Nov 2011 23:32:47 +0200
From: Heikki Linnakangas <heikki.linnakangas@enterprisedb.com>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; fi-FI;
	rv:1.9.2.23) Gecko/20111010 Icedove/3.1.15
MIME-Version: 1.0
To: Albe Laurenz <laurenz.albe@wien.gv.at>
CC: Marti Raudsepp *EXTERN* <marti@juffo.org>,
	Merlin Moncure *EXTERN* <mmoncure@gmail.com>,
	pgsql-performance@postgresql.org
Subject: Re: SSL encryption makes bytea transfer slow
References: 
 <D960CB61B694CF459DCFB4B0128514C2070C3E84@exadv11.host.magwien.gv.at>
	<4EABBE7D.9080201@enterprisedb.com>
	<D960CB61B694CF459DCFB4B0128514C2070C413B@exadv11.host.magwien.gv.at>
	<CAHyXU0ySH+Od7QEitDmz-E7WwmnOS6k1ZUt7XFBCeF-X4PUH1A@mail.gmail.com>
	<D960CB61B694CF459DCFB4B0128514C20713EA58@exadv11.host.magwien.gv.at>
	<CABRT9RBhWGWMvxA7v-mTxcOrZ0ngrnqy66jssKOeokgRqdXqGA@mail.gmail.com>
	<D960CB61B694CF459DCFB4B0128514C20713EBB0@exadv11.host.magwien.gv.at>
In-Reply-To: 
 <D960CB61B694CF459DCFB4B0128514C20713EBB0@exadv11.host.magwien.gv.at>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

On 04.11.2011 10:43, Albe Laurenz wrote:
> Marti Raudsepp wrote:
>>> Disabling OpenSSL compression in the source (which
>>> is possible since OpenSSL 1.0.0) does not give me any performance
>>> improvement.
>>
>> If it doesn't give you any performance improvement then you haven't
>> disabled compression. Modern CPUs can easily saturate 1 GbitE with
>> AES256-encrypted connections. Compression is usually the bottleneck,
>> at 20-30 MB/s.
>
> Hmm, my knowledge of OpenSSL is so little that it is well possible that
> I did it wrong. I have attached the small patch I used; can you see
> where I went wrong?

That only works with OpenSSL 1.0.0 - did you upgrade? I thought you were 
using 0.9.7a earlier.

FWIW, it would be better to test "#ifdef SSL_OP_NO_COMPRESSION" 
directly, rather than the version number.

-- 
   Heikki Linnakangas
   EnterpriseDB   http://www.enterprisedb.com