Hi Hervé, > Le 22 mai 2018 à 10:31, Hervé Commowick <herve.commow...@corp.ovh.com> a > écrit : > > Hello HAProxy ML, > > I tracked down a performance regression about loading bunch of > certificates, at least 3x to 5x more time for loading 100000 certs since > this commit > http://git.haproxy.org/?p=haproxy-1.8.git;a=commitdiff;h=f6b37c67be277b5f0ae60438d796ff29ef19be40 > > This regression is 1.8 specific, (no issue in 1.6 or 1.7 branch) > > my bind line : > bind 127.0.0.1:1443 ssl crt ssl10k ecdhe secp384r1 > > After some tests with William, it looks like it is also related to > "ecdhe secp384r1" parameter, i don't really understand why, but without > this i don't see any regression (and it looks like secp384r1 was > effectively working in old version) >
can you try with « curves » parameter and not the old « ecdhe » ? > Let me know if i can test something, from 1min30s to 5min has some > impacts as you can understand :-) > Manu.
