4 ms·
Just a reminder to everyone using SSL. AES-NI was introduced a few years ago to improve encryption performance and is supported by OpenSSL. Often you just need
by taligent 14y ago
Just a reminder to everyone using SSL. AES-NI was introduced a few years ago to improve encryption performance and is supported by OpenSSL. Often you just need to enable it in your BIOS settings or speak to your VPS provider to see if they support it.
To use it in Nginx just add this under the worker_processes line: ssl_engine aesni;
For more information:
http://datacenteroverlords.com/2011/09/07/aes-ni-pimp-your-aes/ http://datacenteroverlords.com/2011/09/07/aes-ni-pimp-your-a...
- dekz 14y agoNote simply throwing hardware at it won't solve all performance cases. Some sites[1] are using RC4 for their symmetric encryption. AES is a popular scheme but it's not the only one used. [1]: https://www.google.com
- cmer 14y agoDo you know how to find out if my dedicated server has it enabled since I can't tweak the bios myself?
- cmer 14y agoI think I found the answer to my question. `openssl engine -t` seems to do the trick. This is useful for configuring nginx with aes-ni http://forum.nginx.org/read.php?2,181676 http://forum.nginx.org/read.php?2,181676