On Mon, Mar 05, 2007 at 10:46:19AM -0800, Rick Jones wrote:
> Sergey S. Levin wrote:
> >Hello Rick,
> >
> >>SW crypto aint cheap. It can consume lots of CPU cycles. If the
> >>system was nearly CPU saturated with a "plain" transfer, then the
> >>overhead of the crypto can very definitely take the throughput down
> >>considerably.
> >>
> >1. If i use FileZilla and SSL connection - it works on 100% of speed.
> >2. The processor load is just 5% so, this should not be the crypto problem.
>
> I'd next wonder what TCP window size(s) were being used in each case,
> and if SSL was making full use of the TCP window it had available. That
> means a bit of tcpdump tracing, including the connection establishment
> so you can see any window scale values being exchanged.
Even default window-scaling (in LAN environements) will run fast enough,
the key thing to avoid with bulk data transfer is lock-step half-duplex
operation.
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
