Re: [openssl-users] dtls record layer throughput test

2016-06-14 Thread Matt Caswell


On 14/06/16 09:12, Tudor-Dan Ambarus wrote:
> Hi,  Matt, all,
> 
> 
>>> Is there a throughput test for dtls record layer in openssl?
>>> I want to measure the performance of dtls record layer in openssl.
>>>
>>> I've used s_server and s_client to talk over dtls, but seems
>>> that they are only meant for functional testing.
>>
>> Not really. s_time exists for TLS testing but unfortunately doesn't
>> support DTLS. There is also ssltest which isn't part of the installed
>> files but is contained in the test directory. That does have some DTLS
>> support and could *possibly* be used for this purpose - but both client
>> and server are in the same process and communication is in memory, not
>> via the network.
> 
> Thank you for the useful information.
> 
> Are you aware of any attempt of adding an openssl speed test for
> tls/dtls record layer protection? I'm thinking of a method of measuring
> how many tls/dtls record layer encapsulation/decapsulation operations
> openssl can perform in a given time. I don't need a communication channel,
> I only want to test the performance of the authenc operations in
> tls/dtls context.

I know of organisations that do this kind of thing internally (at least
for TLS). I'm not aware of any public effort.

Matt

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users


Re: [openssl-users] dtls record layer throughput test

2016-06-14 Thread Tudor-Dan Ambarus
Hi,  Matt, all,


> > Is there a throughput test for dtls record layer in openssl?
> > I want to measure the performance of dtls record layer in openssl.
> >
> > I've used s_server and s_client to talk over dtls, but seems
> > that they are only meant for functional testing.
> 
> Not really. s_time exists for TLS testing but unfortunately doesn't
> support DTLS. There is also ssltest which isn't part of the installed
> files but is contained in the test directory. That does have some DTLS
> support and could *possibly* be used for this purpose - but both client
> and server are in the same process and communication is in memory, not
> via the network.

Thank you for the useful information.

Are you aware of any attempt of adding an openssl speed test for
tls/dtls record layer protection? I'm thinking of a method of measuring
how many tls/dtls record layer encapsulation/decapsulation operations
openssl can perform in a given time. I don't need a communication channel,
I only want to test the performance of the authenc operations in
tls/dtls context.

Thanks,
ta
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users


Re: [openssl-users] dtls record layer throughput test

2016-06-02 Thread Matt Caswell


On 02/06/16 14:28, Tudor-Dan Ambarus wrote:
> Hi,
> 
> Is there a throughput test for dtls record layer in openssl?
> I want to measure the performance of dtls record layer in openssl.
> 
> I've used s_server and s_client to talk over dtls, but seems
> that they are only meant for functional testing.

Not really. s_time exists for TLS testing but unfortunately doesn't
support DTLS. There is also ssltest which isn't part of the installed
files but is contained in the test directory. That does have some DTLS
support and could *possibly* be used for this purpose - but both client
and server are in the same process and communication is in memory, not
via the network.

Matt
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users


[openssl-users] dtls record layer throughput test

2016-06-02 Thread Tudor-Dan Ambarus
Hi,

Is there a throughput test for dtls record layer in openssl?
I want to measure the performance of dtls record layer in openssl.

I've used s_server and s_client to talk over dtls, but seems
that they are only meant for functional testing.

Thanks,
ta

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users