<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:13px"><div id="yui_3_16_0_1_1454947889432_58501"><font id="yui_3_16_0_1_1454947889432_61716" size="2">Hi,</font></div><div id="yui_3_16_0_1_1454947889432_58501"><font size="2"><br></font></div><div id="yui_3_16_0_1_1454947889432_58501" dir="ltr"><font size="2" id="yui_3_16_0_1_1454947889432_61776">I am doing ssl session caching using the NGINX shared memory cache and getting high response times in load testing.</font></div><div id="yui_3_16_0_1_1454947889432_58501"><font size="2"><br></font></div><div id="yui_3_16_0_1_1454947889432_58501"><b><font size="2">Test setup:</font></b></div><div id="yui_3_16_0_1_1454947889432_58501"><font size="2"><br></font></div><div id="yui_3_16_0_1_1454947889432_58501"><font size="2">clients -------> NGINX --------> server</font></div><div id="yui_3_16_0_1_1454947889432_58501"><font size="2"><br></font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5934" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;"><font size="2">Client sends around 200 Requests/sec and 50% of requests reuses ssl session.</font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5936" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;"><font size="2"><br id="yiv0735955948yui_3_16_0_1_1454947889432_5938" class=""></font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5940" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;" dir="ltr"><font size="2" id="yui_3_16_0_1_1454947889432_61748">NGINX version is 1.0.10 and OpenSSL version used is <span id="yiv0735955948yui_3_16_0_1_1454947889432_5942" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Menlo;">OpenSSL 1.0.1e-fips 11 Feb 2013.</span></font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5940" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;" dir="ltr"><font size="2"><br></font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5944" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;"><font size="2"><br></font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5968" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;"><font size="2" id="yui_3_16_0_1_1454947889432_61764"><b id="yiv0735955948yui_3_16_0_1_1454947889432_5978" class="" style="font-family: arial, sans-serif;">Test Results:</b><br></font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5968" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;"><b class="" style="font-family: arial, sans-serif;"><font size="2"><br></font></b></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5968" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;" dir="ltr"><span class="" style="font-family: arial, sans-serif;" id="yui_3_16_0_1_1454947889432_61340"><font size="2" id="yui_3_16_0_1_1454947889432_61749">Test shows that the connect time increases to 200 secs at time t = 700s (refer session_caching.png attachment). </font></span><span style="font-family: arial, sans-serif; font-size: small;">This looks like an issue with OpenSSL framework as there is some delay in processing SSL requests over period of time. </span></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5968" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;" dir="ltr"><span class="" style="font-family: arial, sans-serif;"><font size="2"><br></font></span></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5968" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;" dir="ltr"><span class="" style="font-family: arial, sans-serif;" id="yui_3_16_0_1_1454947889432_61373"><font size="2" id="yui_3_16_0_1_1454947889432_61762">Please note that the connect time is just 70 ms when external session caching is OFF (refer no_session_caching.png attachment).</font></span></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5968" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;" dir="ltr"><span class="" style="font-family: arial, sans-serif;"><font size="2"><br></font></span></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5968" class="" style="margin: 0px; padding: 0px; border: 0px;" dir="ltr"><font face="arial, sans-serif" id="yui_3_16_0_1_1454947889432_61720" size="2">Has anyone faced similar issues with OpenSSL + NGINX testing ? </font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_5968" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;" dir="ltr"><font size="2"><br></font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_6036" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Arial, Helvetica, sans-serif;"><font face="arial, sans-serif" id="yiv0735955948yui_3_16_0_1_1454947889432_6038" class="" style="margin: 0px; padding: 0px; border: 0px;" size="2">Any feed back would be appreciated.</font></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_6040" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;"><span id="yiv0735955948yui_3_16_0_1_1454947889432_6042" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: arial, sans-serif;"><font size="2"><br id="yiv0735955948yui_3_16_0_1_1454947889432_6044" class=""></font></span></div><div id="yiv0735955948yui_3_16_0_1_1454947889432_6046" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;"><span id="yiv0735955948yui_3_16_0_1_1454947889432_6048" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: arial, sans-serif;"><font size="2">Thanks,</font></span></div><div dir="ltr" id="yiv0735955948yui_3_16_0_1_1454947889432_6050" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica;"><span id="yiv0735955948yui_3_16_0_1_1454947889432_6052" class="" style="margin: 0px; padding: 0px; border: 0px; font-family: arial, sans-serif;"><font id="yui_3_16_0_1_1454947889432_61718" size="2">Sreekanth</font></span></div></div></body></html>