Hi Chris, Thanks for your response,please find my response inline below
Are you using JSSE or OpenSSL for crypto? JSSE. will there be any difference with openssl? How are you measuring CPU usage? using jconsole/jvisualvm Have you tried to correlate that CPU usage with user-request load? I am not sure if I understood the question, but I ran similar load for over a week on my app with only http, cpu usage was quite less(<10%) for the whole week where as with https, it was 20% for a day then jumped to 40% and then kept growing. Encryption isn't free, though modern CPUs are very good at optimizing it Is there a way to control/reduce the CPU usage by some configuration changes? Best Sumit On Sat, Jul 13, 2019 at 12:51 AM Christopher Schultz < ch...@christopherschultz.net> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Sumit, > > On 7/12/19 08:30, Sumit Bhardwaj wrote: > > Hi, > > > > We are using tomcat 9.0.14,and we are running some performance > > tests for our application. > > > > What we have observed is that 1- CPU usage of tomcat is less than > > 10%, when using tomcat without SSL for a week. 2. CPU Usage is > > around 20% and it keeps growing after a day to 40% and keeps > > increasing when we use the tomcat in SSL mode > > > > Connector configuration for HTTP and HTTPS are as > > > > *<Connector port="8080" protocol="HTTP/1.1"* * > > connectionTimeout="20000"* > > > > * />* > > > > > > <Connector port="8443" > > protocol="org.apache.coyote.http11.Http11NioProtocol" > > maxThreads="150" SSLEnabled="true" scheme="https" secure="true" > > sslProtocol="TLS1.2" keystoreFile="keystore" > > keystorePass="changeme" /> > > > > > > Do we need any more configuration or any thing else so that CPU > > usage is under control. > > Are you using JSSE or OpenSSL for crypto? > > How are you measuring CPU usage? > > Have you tried to correlate that CPU usage with user-request load? > > Encryption isn't free, though modern CPUs are very good at optimizing it > . > > - -chris > -----BEGIN PGP SIGNATURE----- > Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ > > iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl0o3akACgkQHPApP6U8 > pFjBgg/9Hf+MyRy/4oF+WmgC8dhz84BYVDuZbsq88rcxqs6CeCEg6+Ygk5d+SUn6 > NYKcrwiXE3Fth4tIh4q+qyY5OUQzV9zPNkGxE+8kdC8ncMBh5RUH7AHUhEUGx0oj > IdwK33jwhGVwvYu3/vOV+aJp5D4N+ItgmEFnHmUiS2xWyx/CoJWYnh8L/QlAYdJO > eCVN8LK2+qITgPDoZPcZa/QEVf+0AT8s3OmFgKsVmVnqSpjSLqmz8YfazsjgT3Lh > gdhINECbuEjzV1264yRxTqL6f80w5/UUROI17YOokncyzdpLBqWl4mLhgBda6K6y > CIbSfq2zbvRxG2/9Q6VxoFh+jJlUrWEbfi3nVGsTcAqiG3rWuNslGo6GJWgGrG2b > oIDbNgqBYJUfMjy0bLZDJd1DoQe4Z8MBiZ/LTQZg8Z04QuO1A0bAWxtjbDEoD1Ft > sZyJP1vb9oJ01vprpymMSenLOl1NuoTLapNeVnkb5BmgkfjCcB4rKeF3AP5Y3HSi > h7zW1ojRjEDyjeY6JugzyXwRAvuIcbZDwj5m/MeMaPp0leOXuTeaDbfRur0WTT4x > kONLwmlGhuwGNLZNzWKFJSiOw9ZQcSfjyyrt/oggjbCq6riP9z30McfA23jNNc3C > qCdj7lUELjkCU3GMFSGZqOYSkCqrAEhw929uQ8tyI6ixUSkLbyI= > =UUVj > -----END PGP SIGNATURE----- > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
