SSL Performance on real hardware versus virtual

[Igor Sysoev]

On Fri, Mar 16, 2007 at 10:04:37AM -0500, Casey Rayman wrote:

> I am sorry this took so long.  I have been traveling the last several  
> weeks.  I have attached my test configuration  file and a debug log.   
> Please let me know if different logs or configs would be helpful.

Am I right that the delay is just before /index.html ?

I see that browser tries to do handshake three times:

2007/03/16 09:49:07 [debug] 7455#0: *1 http check ssl handshake
2007/03/16 09:49:07 [debug] 7455#0: *1 https ssl handshake: 0x80
2007/03/16 09:49:07 [info] 7455#0: *1 peer closed connection in SSL handshake
while reading client request line, client: 10.10.200.117, server: localhost
2007/03/16 09:49:07 [debug] 7455#0: *1 http close request
2007/03/16 09:49:07 [debug] 7455#0: *1 http log handler
2007/03/16 09:49:07 [debug] 7455#0: *1 close http connection: 7
2007/03/16 09:49:30 [debug] 7455#0: *2 http check ssl handshake
2007/03/16 09:49:30 [debug] 7455#0: *2 https ssl handshake: 0x80
2007/03/16 09:49:30 [info] 7455#0: *2 peer closed connection in SSL handshake
while reading client request line, client: 10.10.200.117, server: localhost
2007/03/16 09:49:30 [debug] 7455#0: *2 http close request
2007/03/16 09:49:30 [debug] 7455#0: *2 http log handler
2007/03/16 09:49:30 [debug] 7455#0: *2 close http connection: 7
2007/03/16 09:49:48 [debug] 7455#0: *3 http check ssl handshake
2007/03/16 09:49:48 [debug] 7455#0: *3 https ssl handshake: 0x80
2007/03/16 09:49:48 [debug] 7455#0: *3 http process request line
2007/03/16 09:49:48 [debug] 7455#0: *3 http process request line
2007/03/16 09:49:48 [debug] 7455#0: *3 http request line: "GET /index.html
HTTP/1.1"

Are OpenSSL libraries on both computers the same ?

Try

-       ssl_protocols  SSLv3;
+       ssl_protocols  SSLv3;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
-       ssl_prefer_server_ciphers   on;
+       ssl_prefer_server_ciphers   on;


> On Feb 22, 2007, at 11:40 AM, Igor Sysoev wrote:
> 
> >On Wed, Feb 21, 2007 at 05:55:46PM -0600, Casey Rayman wrote:
> >
> >> I built a test nginx server on debian linux within a virtual  
> >machine on my laptop and it was quite fast.  Based on the results  
> >of that simple test I built a stand alone server on an HP Proliant  
> >DL360.  Everything from a software standpoint should be the same,  
> >but the performance on the real hardware is TERRIBLE.  A simple  
> >index page on the server hardware takes almost a minute to load,  
> >while the same loaded from the laptop takes less than a second.
> >
> >>
> >> Does anyone have any ideas how a dual-Xeon server is slower than  
> >a VM on my laptop with 128mb?
> >
> >It's strange. Could you make a debug log ?

-- 
Igor Sysoev
http://sysoev.ru/en/