undefined | Better HN

0 pointshabibur3y ago0 comments

Fascinating. Any special optimization you are using, or is it from off the shelf software and with standard configuration?

0 comments

kijin3y ago

Sounds totally off-the-shelf.

I have a basic LAMP server running on a 4-core VM on a laptop. I just threw ApacheBench at it (not the fastest benchmarking tool, either -- it eats up 1 core all by itself), and it handles 1200 req/s TLS with no keepalive, and 3400 req/s with keepalive. This stuff scales linearly with core count, so I wouldn't be surprised to see much higher numbers in real servers.

tpetry3y ago

Are these all new TLS connections? Because most benchmarks use TLS resumption which means the TLS handshake was only done once!

lossolo3y ago

In my case, all of TLS connections are new and from real clients (not a benchmark/test)

kijin3y ago

AFAIK apachebench is so old it doesn't support TLS resumption, but I might be wrong.

brazzledazzle3y ago

Is AB running on the same machine during the tests?

kijin3y ago

Same machine, pegging a CPU core the whole time. So the server side only has 3 cores left to use.

lossolo3y ago

For offloading SSL I use haproxy with some custom settings and a few non standard kernel settings.

j / k navigate · click thread line to collapse

0 comments

kijin3y ago

Sounds totally off-the-shelf.

tpetry3y ago

Are these all new TLS connections? Because most benchmarks use TLS resumption which means the TLS handshake was only done once!

lossolo3y ago

In my case, all of TLS connections are new and from real clients (not a benchmark/test)

kijin3y ago

AFAIK apachebench is so old it doesn't support TLS resumption, but I might be wrong.

brazzledazzle3y ago

Is AB running on the same machine during the tests?

kijin3y ago

Same machine, pegging a CPU core the whole time. So the server side only has 3 cores left to use.

lossolo3y ago

For offloading SSL I use haproxy with some custom settings and a few non standard kernel settings.

j / k navigate · click thread line to collapse