4 ms·
It's cute when you make ridiculous assumptions about when people were born. Lets stick to the facts... You stated that Amazon instances couldn't cope. They ca
by theknown99 13y ago
It's cute when you make ridiculous assumptions about when people were born.
Lets stick to the facts...
You stated that Amazon instances couldn't cope. They can. They can cope just fine with thousands of simultaneous HTTP and HTTPS connections.
If you can't get your amazon instance to do this, you're using crappy software.
> "The 10k problem is still not solved. A run of the mill VPS typically manages around 1k simultaneous connections and 10k requests/s. That is, over plain http. Over TLS this goes down to about 100 connections and 600 requests/s. A cheap amazon instance will usually be around 1/5th of all that."
Where the hell are you getting those poor figures from? Are you using Lisp or something?
> "and the prevalent implementation (OpenSSL) is not written for high performance servers (it basically dictates that you run blocking sockets in a thread per connection)."
Again - you're using crappy software. Don't use it.
The 10k problem is historically interesting, but for anyone who knows how to program, it's not really an issue.
- pyalot2 13y agoIf you use anything like Apache, lighttpd, Cherokee, Nginx, Tux, etc. they all use OpenSSL, and nothing else.
- theknown99 13y agoWell don't use them then! Seriously. Writing a webserver isn't a big job. It's not very hard to program something that runs better than the ones you list, for specific use cases.
- pyalot2 13y agoBeen there done that, but the fact is, there is no alternative to OpenSSL I could see if you want to have SSL/TLS 1.1, 1.2 and 1.3.
- deleted 13y ago[deleted]
- theknown99 13y agoIf only there was a way to replace the functionality provided by OpenSSL, by writing some code :(
- pyalot2 13y agoTo rewrite OpenSSL you'll need to be a security and cryptography programmer. And even if you are, the task is daunting to say the least.
- vidarh 13y agoAny reason why none of the open implementations listed here are suitable: http://en.wikipedia.org/wiki/Comparison_of_TLS_implementations http://en.wikipedia.org/wiki/Comparison_of_TLS_implementatio... ?