SSL/ECC and nbproc >1

2016-10-21 Thread Christian Ruppert
Hi, again a performance topic. I did some further testing/benchmarks with ECC and nbproc >1. I was testing on a "E5-2697 v4" and the first thing I noticed was that HAProxy has a fixed limit of 64 for nbproc. So the setup: HAProxy server with the mentioned E5: global user haproxy group

Re: SSL/ECC and nbproc >1

2016-10-21 Thread Conrad Hoffmann
Hi, it's a lot of information, and I don't have time to go into all details right now, but from a quick read, here are the things I noticed: - Why nbproc 64? Your CPU has 18 cores (36 w/ HT), so more procs than that will likely make performance rather worse. HT cores share the cache, so using 18

Re: SSL/ECC and nbproc >1

2016-11-25 Thread Christian Ruppert
Hi Conrad, On 2016-10-21 17:39, Conrad Hoffmann wrote: Hi, it's a lot of information, and I don't have time to go into all details right now, but from a quick read, here are the things I noticed: - Why nbproc 64? Your CPU has 18 cores (36 w/ HT), so more procs than that will likely make perf

Re: SSL/ECC and nbproc >1

2016-11-25 Thread Willy Tarreau
Hi Christian, On Fri, Nov 25, 2016 at 12:12:06PM +0100, Christian Ruppert wrote: > I'll compare HT/no-HT afterwards. In my first tests it didn't same to make > much of a difference o far. > I also tried (in this case) to disable HT entirely and set it to max. 36 > procs. Basically the same as befo

Re: SSL/ECC and nbproc >1

2016-11-25 Thread Christian Ruppert
Hi Willy, On 2016-11-25 14:30, Willy Tarreau wrote: Hi Christian, On Fri, Nov 25, 2016 at 12:12:06PM +0100, Christian Ruppert wrote: I'll compare HT/no-HT afterwards. In my first tests it didn't same to make much of a difference o far. I also tried (in this case) to disable HT entirely and se

Re: SSL/ECC and nbproc >1

2016-11-25 Thread Christian Ruppert
On 2016-11-25 14:44, Christian Ruppert wrote: Hi Willy, On 2016-11-25 14:30, Willy Tarreau wrote: Hi Christian, On Fri, Nov 25, 2016 at 12:12:06PM +0100, Christian Ruppert wrote: I'll compare HT/no-HT afterwards. In my first tests it didn't same to make much of a difference o far. I also tri

Re: SSL/ECC and nbproc >1

2016-11-25 Thread Willy Tarreau
On Fri, Nov 25, 2016 at 02:44:35PM +0100, Christian Ruppert wrote: > I have a default bind for process 1 which is basically the http frontend and > the actual backend, RSA is bound to another, single process and ECC is bound > to all the rest. So in this case SSL (in particular ECC) is the problem.

Re: SSL/ECC and nbproc >1

2016-11-25 Thread Christian Ruppert
On 2016-11-25 15:26, Willy Tarreau wrote: On Fri, Nov 25, 2016 at 02:44:35PM +0100, Christian Ruppert wrote: I have a default bind for process 1 which is basically the http frontend and the actual backend, RSA is bound to another, single process and ECC is bound to all the rest. So in this case