[4833] in WWW Security List Archive
Re: Netscape-Enterprise/2.01 https SLOOOOWW
daemon@ATHENA.MIT.EDU (David W. Morris)
Mon Mar 17 09:20:48 1997
Date: Mon, 17 Mar 1997 00:59:44 -0800 (PST)
From: "David W. Morris" <dwm@xpasc.com>
To: Randy Fischer <fischer@ucet.ufl.edu>
cc: WWW-SECURITY@ns2.rutgers.edu
In-Reply-To: <199703161504.KAA40074@jarry.ucet.ufl.edu>
Errors-To: owner-www-security@ns2.rutgers.edu
Only 3-5 times slower? I think you are doing fine from what I've read.
SSL requires the RSA public key algorithms which in turn involve
performing 1024 bit integer exponentiation. If this is an actual
server thruput problem for you, you have two choices:
a. Buy a faster system for your server
b. Acquire a hardware board to perform the math.
See http://isg.rnbo.com ... as I recall, there is some comparison test
data as well as info on a hardware board to perform the crypto math.
Dave Morris
On Sun, 16 Mar 1997, Randy Fischer wrote:
> I've just started working with a Netscape-Enterprise/2.01
> server and am finding I get very poor performance
> when running securely against the https port compared
> to the http port -- on the order of 3-5 times as long
> to serve up a page. This seems way too slow, I must
> have misconfigured something. Has anyone else seen
> this problem? I'm trying to find the bottleneck.
> What are your experiences with performance tuning?
>
> Randy Fischer
>