Re: Why I think mod_ssl should be in front-end

2000-02-03 Thread Tom Mornini
On Thu, 3 Feb 2000, Vivek Khera wrote: > > "TM" == Tom Mornini <[EMAIL PROTECTED]> writes: > > >> If you have a high volume site that uses SSL, you should really be > >> offloading the SSL processing to dedicated cryptography hardware. > > TM> A fairly new option, I believe, and an excellen

RE: Why I think mod_ssl should be in front-end

2000-02-03 Thread mads
On 3. februar 2000 19:49 Tom Mornini wrote: > 2) Better scalability. I've head (but never benchmarked) that SSL in >general is 100 times more processor intensive than non-ssl > connections. That would have to be if you didn't cache session keys and had to set up a new symmetric key for every

Re: Why I think mod_ssl should be in front-end

2000-02-03 Thread Elizabeth Mattijsen
At 14:51 2/3/00 -0500, Vivek Khera wrote: >> "TM" == Tom Mornini <[EMAIL PROTECTED]> writes: >TM> A fairly new option, I believe, and an excellent point. >Not really. I saw these boards available at least 2 years ago, which >is about half the age of the Web ;-) iPivot was a startup company r

Re: Why I think mod_ssl should be in front-end

2000-02-03 Thread Vivek Khera
> "TM" == Tom Mornini <[EMAIL PROTECTED]> writes: >> If you have a high volume site that uses SSL, you should really be >> offloading the SSL processing to dedicated cryptography hardware. TM> A fairly new option, I believe, and an excellent point. Not really. I saw these boards available

Re: Why I think mod_ssl should be in front-end

2000-02-03 Thread Tom Mornini
On Thu, 3 Feb 2000, Vivek Khera wrote: > > "TM" == Tom Mornini <[EMAIL PROTECTED]> writes: > > TM> 2) Better scalability. I've head (but never benchmarked) that SSL in > TM>general is 100 times more processor intensive than non-ssl connections. > TM>I want my mod_perl server running

Re: Why I think mod_ssl should be in front-end

2000-02-03 Thread Vivek Khera
> "TM" == Tom Mornini <[EMAIL PROTECTED]> writes: TM> 2) Better scalability. I've head (but never benchmarked) that SSL in TM>general is 100 times more processor intensive than non-ssl connections. TM>I want my mod_perl server running mod_perl, not mod_ssl! In a TM>high-volume sit

Why I think mod_ssl should be in front-end

2000-02-03 Thread Tom Mornini
1) Simplifies configuration of mod_perl by eliminating VirtualHost duplication for SSL. mod_perl configuration files can be plenty difficult without the mod_ssl overhead. 2) Better scalability. I've head (but never benchmarked) that SSL in general is 100 times more processor intensive th