Re: OpenSSL v3 performance regressions

[Daniel Gustafsson]

> On 26 Sep 2023, at 10:36, Adrien Nayrat  wrote:

> Should Postgres support alternative SSL libraries has HAProxy?

PostgreSQL can be built with LibreSSL instead of OpenSSL, which may or may not
be a better option performance wise for a particular application.  Benchmarking
your workload is key to understanding performance, a lot of the regressions
pointed to in that blogpost wont affect postgres.

--
Daniel Gustafsson

OpenSSL v3 performance regressions

[Adrien Nayrat]

Hello,


I read this article from Haproxy, they noticed OpenSSL v3 has huge 
performance regressions :

https://github.com/haproxy/wiki/wiki/SSL-Libraries-Support-Status#openssl

This is a known issue : 
https://github.com/openssl/openssl/issues/17627#issuecomment-1060123659


Unfortunately, v3 is shipped with many distributions (Debian, Redhat, 
Rockylinux...) : https://pkgs.org/search/?q=openssl


I am afraid of users will face performance issues once they update their 
distro.


Does someone already encounter problems? Should Postgres support 
alternative SSL libraries has HAProxy?


Regards,

--
Adrien NAYRAT