On 2006-04-03, at 06:12, Zhuang Yuyao wrote:
aes-256-cbc[engine] 3178.40k 25465.60k 50636.80k 194201.60k 2088140.80k
I guess there's something wrong with the OpenSSL benchmark. I really can't believe in 2GB/s (16Gbit/s) throughput on a PCI device. 8-)
Algorithm engine 1K 4K 50K 100K 200K AES-256-CBC+SHA1 no 14.12 13.21 7.92 4.48 2.17 (Requests per second) AES-256-CBC+SHA1 yes 51.10 23.34 7.30 3.12 1.91 (Requests per second)
I'm pretty sure stunnel is *not* a performance bottleneck in your configuration. AFAIR the most CPU-expensive operation is the SSL handshake on the client, not server. See: http://stunnel.mirt.net/perf.html
BTW: What is your version of OpenSSL library? According to my tests OpenSSL 0.9.8x is *a lot* faster than OpenSSL 0.9.7x.
Best regards, Mike