Hello HAProxy ML,

I tracked down a performance regression about loading bunch of
certificates, at least 3x to 5x more time for loading 100000 certs since
this commit
http://git.haproxy.org/?p=haproxy-1.8.git;a=commitdiff;h=f6b37c67be277b5f0ae60438d796ff29ef19be40

This regression is 1.8 specific, (no issue in 1.6 or 1.7 branch)

my bind line :
bind 127.0.0.1:1443 ssl crt ssl10k ecdhe secp384r1

After some tests with William, it looks like it is also related to
"ecdhe secp384r1" parameter, i don't really understand why, but without
this i don't see any regression (and it looks like secp384r1 was
effectively working in old version)

Let me know if i can test something, from 1min30s to 5min has some
impacts as you can understand :-)

Hervé.

Reply via email to