[stunnel-users] (stunnel-4.14) poor performance with openssl engine
Michal Trojnara
Michal.Trojnara at mobi-com.net
Mon Apr 3 23:36:21 CEST 2006
On 2006-04-03, at 06:12, Zhuang Yuyao wrote:
> aes-256-cbc[engine] 3178.40k 25465.60k 50636.80k
> 194201.60k 2088140.80k
I guess there's something wrong with the OpenSSL benchmark. I really
can't believe in 2GB/s (16Gbit/s) throughput on a PCI device. 8-)
> Algorithm engine 1K 4K 50K 100K 200K
> AES-256-CBC+SHA1 no 14.12 13.21 7.92 4.48 2.17
> (Requests per second)
> AES-256-CBC+SHA1 yes 51.10 23.34 7.30 3.12 1.91
> (Requests per second)
I'm pretty sure stunnel is *not* a performance bottleneck in your
configuration.
AFAIR the most CPU-expensive operation is the SSL handshake on the
client, not server.
See: http://stunnel.mirt.net/perf.html
BTW: What is your version of OpenSSL library? According to my tests
OpenSSL 0.9.8x is *a lot* faster than OpenSSL 0.9.7x.
Best regards,
Mike
More information about the stunnel-users
mailing list