Re: nginx KTLS and HTTP/2 performance degradation

2022-09-08 Thread Maxim Dounin
Hello! On Thu, Sep 08, 2022 at 04:58:24PM +0300, Noam Cvikel wrote: > Late to the party. We've seen the same results over here when using sendfile > with HTTP/2. You can increase it from 8k to 16 frames using http2_chunk_size > but that still won't be good performance when dealing with files that

RE: nginx KTLS and HTTP/2 performance degradation

2022-09-08 Thread Noam Cvikel
| Delivery Software Engineer | no...@qwilt.com -Original Message- From: nginx-devel [mailto:nginx-devel-boun...@nginx.org] On Behalf Of Maxim Dounin Sent: Thursday, December 2, 2021 15:07 To: nginx-devel@nginx.org Subject: Re: nginx KTLS and HTTP/2 performance degradation Hello! On Thu, Dec 02

Re: nginx KTLS and HTTP/2 performance degradation

2021-12-02 Thread Maxim Dounin
Hello! On Fri, Dec 03, 2021 at 12:31:50AM +, Vadim Fedorenko wrote: > I would say that current implementation of Kernel TLS in OpenSSL will give > huge overhead because of additional syscall for every frame and it's header, > it doesn't matter if it's sendfile or not. Without sendfile it's ac

Re: nginx KTLS and HTTP/2 performance degradation

2021-12-02 Thread Vadim Fedorenko
Hello! I would say that current implementation of Kernel TLS in OpenSSL will give huge overhead because of additional syscall for every frame and it's header, it doesn't matter if it's sendfile or not. Without sendfile it's actually 5% worse in my tests. That's why it's better to disable Kernel TLS

Re: nginx KTLS and HTTP/2 performance degradation

2021-12-02 Thread Maxim Dounin
Hello! On Thu, Dec 02, 2021 at 02:05:52PM +0200, Lyuben Stoev wrote: > Hello, >     I have tested the nginx with the patch > https://hg.nginx.org/nginx/rev/65946a191197 (SSL: SSL_sendfile() support > with kernel TLS.) following the nginx blog article > https://www.nginx.com/blog/improving-ngi

nginx KTLS and HTTP/2 performance degradation

2021-12-02 Thread Lyuben Stoev
Hello,     I have tested the nginx with the patch https://hg.nginx.org/nginx/rev/65946a191197 (SSL: SSL_sendfile() support with kernel TLS.) following the nginx blog article https://www.nginx.com/blog/improving-nginx-performance-with-kernel-tls/ And it sort of works, but I have bad performance