<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I haven't had a chance to use EC2's ssl load balancing so I can't speak to their features or performance. It certainly is a cost effective way to try it out!<div><br></div><div>I do know that the kemp boxes can do 1000 - 10,000 transactions per second depending on the model. I routinely push 7-10MB of SSL web traffic through it all day long. </div><div><br></div><div>Looking at last Monday's stats, we pushed about 40GB of traffic in 575,000 pages (just over 4,000,000 total hits including all images, js includes, css, etc) and ~12,000 unique users with 90% of traffic between 7am and 7pm.</div><div><br></div><div>Also, looking at the SSL handshake, here are our numbers:</div><div><div>SSL handshake has read 997 bytes and written 280 bytes</div><div><br></div><div>I'm not sure if it is because of the Ciphers chosen or mainly because it's a single root cert, but those numbers are even lower than Google's ssl handshake. I'm probably going to be really disappointed the next time I purchase a cert because I don't think anyone offers a single root cert now that all CAs are going to 2048 bit.</div><div><br></div><div>-Tom</div><div><br></div><div><br></div><div><br></div><div><div>On Nov 22, 2010, at 10:39 PM, Matthew Nuzum wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div class="gmail_quote">On Thu, Nov 4, 2010 at 1:09 PM, Tom Pohl <span dir="ltr"><<a href="mailto:tom@tcpconsulting.com">tom@tcpconsulting.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<br>
That being said, there are other good products out there that can do SSL acceleration / load balancing based appliances like Kemp Technologies loadmasters that can ease some of these issues.<br></blockquote><div><br></div>
<div>I think I'm going to have to look into one of those when my current project gets serious enough.</div><div><br></div><div>Using ab on localhost to a light-weight php file:</div><div><br></div><div> Requests per second: 2715.35 [#/sec] (mean)</div>
<div><br></div><div>When accessing the same file via SSL:</div><div><br></div><div><div> Requests per second: 10.18 [#/sec] (mean)</div></div><div><br></div><div>(and server load starts to climb) :-(</div><div><br></div>
<div>If I use EC2 for my servers then I can use their load balancer for $18 /mo which will offload the SSL for me. That seems like a pretty cheap solution, what do you think?</div></div><br>-- <br>Matthew Nuzum<br>newz2000 on freenode, skype, linkedin, <a href="http://identi.ca/" target="_blank">identi.ca</a> and twitter<br>
<br>"An investment in knowledge pays the best interest." -Benjamin Franklin <br><br>
_______________________________________________<br>Cialug mailing list<br><a href="mailto:Cialug@cialug.org">Cialug@cialug.org</a><br>http://cialug.org/mailman/listinfo/cialug<br></blockquote></div><br></div></body></html>