We are experiencing 100% cpu load by this specific haproxy thread during huge ssl load. With haproxy .4 we first used stunnel, than apache with mod_ssl. I think haproxy with ssl performance much better than the other 2 but I am thinking about offloading to a specific ssl device. Does anybody know anything about dedicated hardware?
Thanks Gerd -------- Weitergeleitete Nachricht -------- Von: Nathan Williams <nath.e.w...@gmail.com<mailto:nathan%20williams%20%3cnath.e.w...@gmail.com%3e>> An: Lukas Tribus <luky...@hotmail.com<mailto:lukas%20tribus%20%3cluky...@hotmail.com%3e>>, Gerd Mueller <gerd.muel...@mikatiming.de<mailto:gerd%20mueller%20%3cgerd.muel...@mikatiming.de%3e>>, haproxy@formilux.org <haproxy@formilux.org<mailto:%22hapr...@formilux.org%22%20%3chapr...@formilux.org%3e>> Betreff: Re: ssl offloading Datum: Fri, 1 Apr 2016 01:54:29 +0000 stunnel's what we used before Haproxy had it built in, which worked fine, but SSL offloading in Haproxy's been excellent in our experience, so my guess would be that you could make it work with some config tuning. On Thu, Mar 31, 2016, 12:45 PM Lukas Tribus <luky...@hotmail.com<mailto:luky...@hotmail.com>> wrote: > Hi list, > > what are your ideas about offloading of ssl? ssl inside haproxy is nice > but is very expensive. Why would you think that? Lukas
