On Tue, Jun 7, 2016 at 11:31 AM, Pavel Stehule <pavel.steh...@gmail.com> wrote:
> > > 2016-06-07 11:29 GMT+02:00 Magnus Hagander <mag...@hagander.net>: > >> >> >> On Tue, Jun 7, 2016 at 11:24 AM, Pavel Stehule <pavel.steh...@gmail.com> >> wrote: >> >>> Hi >>> >>> I am testing speed of connection to Postgres. >>> >>> The ssl connection is slower, and it is expected. But when I configure >>> pg_hba.conf to disable ssl via hostnossl, then ssl is not used, but the >>> speed is similar to ssl. >>> >>> Is it expected behave? >>> >>> >> That's definitely not expected behavior. hostnossl should turn off ssl >> which should turn off the overhead completely. Does it make a difference if >> you also disable it from the client side? >> > > When I explicitly disabled ssl, then I seen significantly less time > > Intersting. Can you check with a network trace that it actually turns off ssl, so nothing is broken there? One thing that could be taking the time is an extra roundtrip -- e.g. it tries to connect with ssl fails and retries without. A network trace should also make this obvious, and can hopefully show you exactly where in the connection the time is spent. -- Magnus Hagander Me: http://www.hagander.net/ Work: http://www.redpill-linpro.com/