Hi, >From memory the difference in performance is rather large, maybe 10x or 20x. It really does make a difference to how many requests we can handle. Conscrypt takes jetty from being severely limited by the speed at which it can transfer encrypted data, to encryption adding no meaningful overhead to data transfer.
-Luke On Tue, Mar 16, 2021 at 1:21 AM Simone Bordet <sbor...@webtide.com> wrote: > Hi, > > On Mon, Mar 15, 2021 at 12:50 AM Luke B <lukenbutt...@gmail.com> wrote: > > > > Hi, > > > > So it seems conscrypt has even more memory leaks: > > https://github.com/google/conscrypt/issues/835 > > https://github.com/google/conscrypt/issues/984 > > > > Conscrypt doesn't appear to be sufficiently reliable to be used in > production. > > > > Setting up jetty to listen only on localhost without SSL and having an > nginx (or other web server) reverse proxy to provide SSL is possible but > unlikely something that is acceptable as encryption is required all the way > to the java process. In this case a tcp dump would reveal passwords. > > > > Jetty, it seems, is trapped behind Java's relatively slow SSL > implementation. > > I guess the keyword here is "relatively". > > Java's SSL is slower no doubt, but perhaps it does the job? > Is the move to Conscrypt due to benchmarks (A is faster than B), but B > can handle the load just nicely? > Is the move to Conscrypt due to saving CPU/memory in the cloud to save > money? > > I'm saying that with the latest Java versions, with native support for > encryption primitives, TLS resumption, etc. maybe Java TLS does the > job for you. > Sure it's not the Ferrari you wanted, but it's a decently fast car anyway? > > -- > Simone Bordet > ---- > http://cometd.org > http://webtide.com > Developer advice, training, services and support > from the Jetty & CometD experts. > _______________________________________________ > jetty-users mailing list > jetty-users@eclipse.org > To unsubscribe from this list, visit > https://www.eclipse.org/mailman/listinfo/jetty-users >
_______________________________________________ jetty-users mailing list jetty-users@eclipse.org To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/jetty-users
