[Cialug] decreasing website latency

[Tom Pohl]

I haven't had a chance to use EC2's ssl load balancing so I can't speak to their features or performance. It certainly is a cost effective way to try it out!

I do know that the kemp boxes can do 1000 - 10,000 transactions per second depending on the model. I routinely push 7-10MB of SSL web traffic through it all day long. 

Looking at last Monday's stats, we pushed about 40GB of traffic in 575,000 pages (just over 4,000,000 total hits including all images, js includes, css, etc) and ~12,000 unique users with 90% of traffic between 7am and 7pm.

Also, looking at the SSL handshake, here are our numbers:
SSL handshake has read 997 bytes and written 280 bytes

I'm not sure if it is because of the Ciphers chosen or mainly because it's a single root cert, but those numbers are even lower than Google's ssl handshake. I'm probably going to be really disappointed the next time I purchase a cert because I don't think anyone offers a single root cert now that all CAs are going to 2048 bit.

-Tom



On Nov 22, 2010, at 10:39 PM, Matthew Nuzum wrote:

> On Thu, Nov 4, 2010 at 1:09 PM, Tom Pohl <tom at tcpconsulting.com> wrote:
> 
> That being said, there are other good products out there that can do SSL acceleration / load balancing based appliances like Kemp Technologies loadmasters that can ease some of these issues.
> 
> I think I'm going to have to look into one of those when my current project gets serious enough.
> 
> Using ab on localhost to a light-weight php file:
> 
>     Requests per second:    2715.35 [#/sec] (mean)
> 
> When accessing the same file via SSL:
> 
>     Requests per second:    10.18 [#/sec] (mean)
> 
> (and server load starts to climb) :-(
> 
> If I use EC2 for my servers then I can use their load balancer for $18 /mo which will offload the SSL for me. That seems like a pretty cheap solution, what do you think?
> 
> -- 
> Matthew Nuzum
> newz2000 on freenode, skype, linkedin, identi.ca and twitter
> 
> "An investment in knowledge pays the best interest." -Benjamin Franklin 
> 
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cialug.org/pipermail/cialug/attachments/20101122/56ba425c/attachment-0001.htm