Hi, On 25-11-20, Petr Štetiar wrote: > Paul Spooren <m...@aparcar.org> [2020-11-24 22:29:00]: > > Hi, > > > Using HTTPS for opkg dramatically slows down download of packages and reload > > of indexes. > > do you've such dramatic numbers handy?
For the imagebuilder, it increases the *total* build time (not just download time!) by +50%: http://lists.openwrt.org/pipermail/openwrt-devel/2020-September/031406.html On a device, I suspect it will be much worse but I can't currently test that. It shouldn't be too hard, just make sure to clean opkg files between each test to have a proper apple-to-apple comparison. The main problem is the lack of persistent connection, which means doing a full expensive TLS exchange for each separate file download, however small it is. It's a lot of crypto for a small CPU on devices, and if it's widely deployed it will also impact the load on the download server. Thus, it's not reasonable to have this by default in a release. I'm working on adding persistent connection support to opkg but it's not straightforward. Baptiste
signature.asc
Description: PGP signature
_______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
