Are you using JSSE or OpenSSL for crypto? JSSE. will there be any difference with openssl? How are you measuring CPU usage? using jconsole/jvisualvm
Have you tried to correlate that CPU usage with user-request load? I am not sure if I understood the question, but I ran similar load for over a week on my app with only http, cpu usage was quite less(<10%) where with https, it was 20% for a day then jumped to 40% and then keeps growing. Encryption isn't free, though modern CPUs are very good at optimizing it Best Sumit On Sat, Jul 13, 2019 at 12:51 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Sumit, > > On 7/12/19 08:30, Sumit Bhardwaj wrote: > > Hi, > > > > We are using tomcat 9.0.14,and we are running some performance > > tests for our application. > > > > What we have observed is that 1- CPU usage of tomcat is less than > > 10%, when using tomcat without SSL for a week. 2. CPU Usage is > > around 20% and it keeps growing after a day to 40% and keeps > > increasing when we use the tomcat in SSL mode > > > > Connector configuration for HTTP and HTTPS are as > > > > *<Connector port="8080" protocol="HTTP/1.1"* * > > connectionTimeout="20000"* > > > > * />* > > > > > > <Connector port="8443" > > protocol="org.apache.coyote.http11.Http11NioProtocol" > > maxThreads="150" SSLEnabled="true" scheme="https" secure="true" > > sslProtocol="TLS1.2" keystoreFile="keystore" > > keystorePass="changeme" /> > > > > > > Do we need any more configuration or any thing else so that CPU > > usage is under control. > > Are you using JSSE or OpenSSL for crypto? > > How are you measuring CPU usage? > > Have you tried to correlate that CPU usage with user-request load? > > Encryption isn't free, though modern CPUs are very good at optimizing it > . > > - -chris > -----BEGIN PGP SIGNATURE----- > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ > > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl0o3akACgkQHPApP6U8 > pFjBgg/9Hf+MyRy/4oF+WmgC8dhz84BYVDuZbsq88rcxqs6CeCEg6+Ygk5d+SUn6 > NYKcrwiXE3Fth4tIh4q+qyY5OUQzV9zPNkGxE+8kdC8ncMBh5RUH7AHUhEUGx0oj > IdwK33jwhGVwvYu3/vOV+aJp5D4N+ItgmEFnHmUiS2xWyx/CoJWYnh8L/QlAYdJO > eCVN8LK2+qITgPDoZPcZa/QEVf+0AT8s3OmFgKsVmVnqSpjSLqmz8YfazsjgT3Lh > gdhINECbuEjzV1264yRxTqL6f80w5/UUROI17YOokncyzdpLBqWl4mLhgBda6K6y > CIbSfq2zbvRxG2/9Q6VxoFh+jJlUrWEbfi3nVGsTcAqiG3rWuNslGo6GJWgGrG2b > oIDbNgqBYJUfMjy0bLZDJd1DoQe4Z8MBiZ/LTQZg8Z04QuO1A0bAWxtjbDEoD1Ft > sZyJP1vb9oJ01vprpymMSenLOl1NuoTLapNeVnkb5BmgkfjCcB4rKeF3AP5Y3HSi > h7zW1ojRjEDyjeY6JugzyXwRAvuIcbZDwj5m/MeMaPp0leOXuTeaDbfRur0WTT4x > kONLwmlGhuwGNLZNzWKFJSiOw9ZQcSfjyyrt/oggjbCq6riP9z30McfA23jNNc3C > qCdj7lUELjkCU3GMFSGZqOYSkCqrAEhw929uQ8tyI6ixUSkLbyI= > =UUVj > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
