[4833] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Netscape-Enterprise/2.01 https SLOOOOWW

daemon@ATHENA.MIT.EDU (David W. Morris)
Mon Mar 17 09:20:48 1997

Date: Mon, 17 Mar 1997 00:59:44 -0800 (PST)
From: "David W. Morris" <dwm@xpasc.com>
To: Randy Fischer <fischer@ucet.ufl.edu>
cc: WWW-SECURITY@ns2.rutgers.edu
In-Reply-To: <199703161504.KAA40074@jarry.ucet.ufl.edu>
Errors-To: owner-www-security@ns2.rutgers.edu


Only 3-5 times slower?  I think you are doing fine from what I've read.

SSL requires the RSA public key algorithms which in turn involve 
performing 1024 bit integer exponentiation. If this is an actual
server thruput problem for you, you have two choices:

  a.  Buy a faster system for your server
  b.  Acquire a hardware board to perform the math.

See http://isg.rnbo.com ... as I recall, there is some comparison test
data as well as info on a hardware board to perform the crypto math.

Dave Morris

On Sun, 16 Mar 1997, Randy Fischer wrote:

> I've just started working with a Netscape-Enterprise/2.01
> server and am finding I get very poor performance 
> when running securely against the https port compared
> to the http port -- on the order of 3-5 times as long
> to serve up a page.  This seems way too slow, I must
> have misconfigured something.  Has anyone else seen
> this problem?  I'm trying to find the bottleneck.
> What are your experiences with performance tuning?
> 
> 					Randy Fischer
> 


home help back first fref pref prev next nref lref last post