[stunnel-users] (stunnel-4.14) poor performance with openssl engine

Mon Apr 3 23:36:21 CEST 2006

On 2006-04-03, at 06:12, Zhuang Yuyao wrote:
> aes-256-cbc[engine]       3178.40k    25465.60k    50636.80k   
> 194201.60k  2088140.80k

I guess there's something wrong with the OpenSSL benchmark.  I really 
can't believe in 2GB/s (16Gbit/s) throughput on a PCI device.  8-)

> Algorithm                   engine  1K    4K    50K    100K    200K
> AES-256-CBC+SHA1    no        14.12    13.21    7.92    4.48    2.17   
>  (Requests per second)
> AES-256-CBC+SHA1    yes        51.10    23.34    7.30    3.12    1.91  
>  (Requests per second)

I'm pretty sure stunnel is *not* a performance bottleneck in your 
configuration.
AFAIR the most CPU-expensive operation is the SSL handshake on the 
client, not server.
See: http://stunnel.mirt.net/perf.html

BTW: What is your version of OpenSSL library?  According to my tests 
OpenSSL 0.9.8x is *a lot* faster than OpenSSL 0.9.7x.

Best regards,
     Mike