Andy Colson wrote:
> On 01/21/2016 03:59 PM, Johannes wrote:
>> Here are some transferring measurements (from server to client) with the
>> same file.
>>
>> scp
>> +ssl -compression 1.3 sec
>> +ssl +compression 4.6 sec
>>
>> pgadmin
>> select lo_get(12345);
>> -ssl              3.4 sec
>> +ssl +compression 5.5 sec
>> +ssl -compression 4.5 sec
>>
>> psql
>> select lo_get(12345);
>> +ssl -compression 6.0 sec
>> -ssl              4.4 sec
>>
>> java/jdbc
>> only while(in.read(buf,0,len))
>> +ssl -compression 6.0 sec
>> -ssl              3.0 sec (+ 1.8 sec for new Image())
>>
>> Here is a link for insecure ssl compression:
>> https://en.wikipedia.org/wiki/Comparison_of_TLS_implementations#Compression

> Thanks for the link on ssl compression, I'd not seen that before.  I'm going 
> to have to read up.
> 
> Your numbers ... look ...  odd.  scp +compression is slower?  pgadmin -ssl 
> and psql -ssl and java -ssl
> are all different speeds?  ssl always adds extra time?  Maybe a high latency 
> thing?  If you ping the
> other box what sort of time's do you get?  Maybe the extra ssl handshakes up 
> front + high latency is
> causing it.  You could try a shared/cached ssh connection to avoid the 
> overhead.

Johannes' measurements make sense to me.

In situations where network bandwith is not the bottleneck, you will be slower 
with
SSL compression than without.  The time you lose is the time the CPU needs to 
compress
and decompress the data.  I observed that behaviour in one of our systems that 
transferred
byteas with images over SSL, which led me to introduce the "sslcompression" 
connection parameter
into PostgreSQL.

The variation of times between different clients could be randon (are these 
differences
conststent across repeated runs?), could be caused by different SSL 
implementations
in Java and OpenSSL or by additional processing in pgAdmin III.

Yours,
Laurenz Albe


-- 
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

Reply via email to