RE: mod_ssl, erratic performance

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



----- Igor GaliÄ [mailto:i.galic@xxxxxxxxxxxxxx] wrote:
>
>----- "john 3 newton" <john.3.newton@xxxxxx> wrote:
>
>> Solaris 10
>> Apache version: 2.2.11 & 2.2.17 (32 &64 bit)
>> 
>> We recently moved our production webserver from a sparc platform
>> (T2000) to an x86/64 platform (x2270-m2) and we have noticed an
>> erratic response time for downloads of files using SSL. This seems to
>> randomly occur with any files about 10k or larger. For instance, I
>> have been using a test file of 140K, and it can take 0.5 or 4.8
>> seconds to transfer. When using the sparc platform, it always only
>> takes 0.5 seconds.
>
>Are you using Solaris' crypto acceleration? (I don't mean the T2's
>chip, I mean the software) -- if so, disable it, deregister it,
>uninstall it and purge it because it will kill performance.

I don't know. I haven't heard of this before, but I'll research. It is entirely possible as the T2000's were built by my predecessor years ago, and I used a different methodology for installation on these m2270's.

> 
>> I noticed this as we are using an external monitoring system
>> (Gomez.com) and we started seeing these wildly varying times for
>> transaction processing.
>> 
>> I have tried a cut down SSL setup for testing, and examined every
>
>Does that mean you tested the same setup in plain-text?

If you mean http vs. https, yes, I did test it with a plain non-encrypted http setup, and I don't see the performance issue at all. It is solely with SSL in the mix.

>
>If you see the same issues on the boxes on plain-text, then
>consider disabling things sendfile() if you're on ZFS:
>
>http://www.stdlib.net/~colmmacc/2006/03/23/niagara-vs-ftpheanetie-showdown/
>
>> directive and option, and I can't make sense of the problem. I'm using
>> the following configuration string, and I'd be happy to include the
>> configuration setups..
>> 
>> ./configure --prefix=/app/www/apache-2.2.11_32 --with-mpm=worker
>> --enable-ssl --with-apr=/app/apr-1.3.3-32
>> --with-apr-util=/app/apr-1.3.3-32 --enable-mods-shared="headers
>> expires deflate"
>> 
>> Server version: Apache/2.2.17 (Unix)
>> Server built:   Jan  5 2011 15:56:01
>> Server's Module Magic Number: 20051115:25
>> Server loaded:  APR 1.3.3, APR-Util 1.3.4
>> Compiled using: APR 1.3.3, APR-Util 1.3.4
>> Architecture:   32-bit
>
>I know this is silly, but have you considered going 64
>to see if there's a difference?

Not silly at all. I did a 64 bit compile and test, and got the same results. That was one of my first thoughts.

>
>> Server MPM:     Worker
>>   threaded:     yes (fixed thread count)
>>     forked:     yes (variable process count)
>> Server compiled with....
>>  -D APACHE_MPM_DIR="server/mpm/worker"
>>  -D APR_HAS_SENDFILE
>>  -D APR_HAS_MMAP
>>  -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
>>  -D APR_USE_FCNTL_SERIALIZE
>>  -D APR_USE_PTHREAD_SERIALIZE
>>  -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
>>  -D APR_HAS_OTHER_CHILD
>>  -D AP_HAVE_RELIABLE_PIPED_LOGS
>>  -D DYNAMIC_MODULE_LIMIT=128
>>  -D HTTPD_ROOT="/app/www/apache-2.2.17_32"
>>  -D SUEXEC_BIN="/app/www/apache-2.2.17_32/bin/suexec"
>>  -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
>>  -D DEFAULT_ERRORLOG="logs/error_log"
>>  -D AP_TYPES_CONFIG_FILE="conf/mime.types"
>>  -D SERVER_CONFIG_FILE="conf/httpd.conf"
>> 
>> I can move the bare-bones configuration between the sparc and x86
>> platforms and get normal response on the sparc, and irregular on the
>> x86.
>> 
>> Any help would be appreciated.
>> 
>> John Newton
>
>i
>
>-- 
>Igor GaliÄ

Thanks for the help.

John Newton




[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux