Hello HAProxy ML, I tracked down a performance regression about loading bunch of certificates, at least 3x to 5x more time for loading 100000 certs since this commit http://git.haproxy.org/?p=haproxy-1.8.git;a=commitdiff;h=f6b37c67be277b5f0ae60438d796ff29ef19be40
This regression is 1.8 specific, (no issue in 1.6 or 1.7 branch) my bind line : bind 127.0.0.1:1443 ssl crt ssl10k ecdhe secp384r1 After some tests with William, it looks like it is also related to "ecdhe secp384r1" parameter, i don't really understand why, but without this i don't see any regression (and it looks like secp384r1 was effectively working in old version) Let me know if i can test something, from 1min30s to 5min has some impacts as you can understand :-) Hervé.