> On 29.09.2025., at 10:58, Iago Alonso <[email protected]> wrote: > > Hello, > > A while ago it was recommended to stick with OpenSSL 1.1.1 if you needed > performance for crypto functions, but I think that was between 3.0 ~ 3.2. > > We are starting to test HAProxy 3.2.5 with OpenSSL 3.5 and we are seeing that > the performance is pretty much on par in general, maybe still not reaching > 1.1.1 levels but at least we don't see such a drop in performance as we were > seeing before. > > Does anyone have any experience running OpenSSL 3 in production and can share > the experience? Any weird behavior or anything to keep in mind? >
Hi, I believe Willy and William have already covered the SSL situation in great detail in the blog post below: https://www.haproxy.com/blog/state-of-ssl-stacks Kind regards, D. -- Dinko Korunic ** Standard disclaimer applies ** Sent from OSF1 osf1v4b V4.0 564 alpha
