[stunnel-users] Inconsistent performance across stunnel and/or OpenSSL versions

PPingPongBaker PPingPongBaker ppingpongbaker at gmail.com
Thu Apr 18 08:29:52 CEST 2013


Another data point after a binary search across versions keeping OpenSSL
version identical at 1.0.1e

I see this performance regression between stunnel versions 4.39 and 4.40.

Regards.


On Wed, Apr 17, 2013 at 4:46 PM, PPingPongBaker PPingPongBaker <
ppingpongbaker at gmail.com> wrote:

>
> On Wed, Apr 17, 2013 at 12:23 PM, Janusz Dziemidowicz <
> rraptorr at nails.eu.org> wrote:
>
>> 2013/4/17 PPingPongBaker PPingPongBaker <ppingpongbaker at gmail.com>:
>>
>>
>> If you want to compare various stunnel versions, then use the same
>> OpenSSL version. If you want to compare OpenSSL... then use the same
>> stunnel version. The configuration you mentioned above doesn't make a
>> lot of sense as it makes it hard to tell where the performance drop
>> comes from. If you really must test such configuration, the best way
>> would be to ensure the same TLS version (1.0, not 1.1 or 1.2, OpenSSL
>> 1.0.1 defaults to 1.2) and the same cipher.
>>
>>
> Hi Janusz,
>
> As per your suggestions and mea culpa in some stated results. Here is a
> hopefully complete/better matrix. Making sure that CPU is pegged at 100%
> and in stunnel.conf (sslVersion = TLSv1)
>
> stunnel 4.29, OpenSSL 0.9.8o - ~300 requests per sec
> stunnel 4.29, OpenSSL 1.0.1e - ~360 requests per sec
> stunnel 4.56, OpenSSL 0.9.8o - ~100 requests per sec
> stunnel 4.56, OpenSSL 1.0.1e - ~120 requests per sec
>
> Regards.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20130417/3a027234/attachment.html>


More information about the stunnel-users mailing list