Re: [HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Pavel Stehule
2016-06-08 8:26 GMT+02:00 Kyotaro HORIGUCHI : > At Tue, 7 Jun 2016 12:18:31 +0200, Magnus Hagander > wrote in < > cabuevez5qrmq4ebysbz+ujfg_3_ap361zqtgbh_ef+2j6p0...@mail.gmail.com> > > On Tue, Jun 7, 2016 at 11:31 AM, Pavel Stehule > > wrote: > > >> That's definitely not expected behavior. host

Re: [HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Kyotaro HORIGUCHI
At Tue, 7 Jun 2016 12:18:31 +0200, Magnus Hagander wrote in > On Tue, Jun 7, 2016 at 11:31 AM, Pavel Stehule > wrote: > >> That's definitely not expected behavior. hostnossl should turn off ssl > >> which should turn off the overhead completely. Does it make a difference if > >> you also disabl

Re: [HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Tom Lane
Magnus Hagander writes: > One thing that could be taking the time is an extra roundtrip -- e.g. it > tries to connect with ssl fails and retries without. I'd assume a priori that that's it. If so, the fix is to configure libpq to try non-SSL first not SSL first. There is an option for that, IIR

Re: [HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Pavel Stehule
2016-06-07 12:18 GMT+02:00 Magnus Hagander : > > > On Tue, Jun 7, 2016 at 11:31 AM, Pavel Stehule > wrote: > >> >> >> 2016-06-07 11:29 GMT+02:00 Magnus Hagander : >> >>> >>> >>> On Tue, Jun 7, 2016 at 11:24 AM, Pavel Stehule >>> wrote: >>> Hi I am testing speed of connection to Po

Re: [HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Magnus Hagander
On Tue, Jun 7, 2016 at 12:41 PM, Andreas Karlsson wrote: > On 06/07/2016 12:18 PM, Magnus Hagander wrote: > > Intersting. Can you check with a network trace that it actually turns > > off ssl, so nothing is broken there? > > > > One thing that could be taking the time is an extra roundtrip -- e.g

Re: [HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Andreas Karlsson
On 06/07/2016 12:18 PM, Magnus Hagander wrote: > Intersting. Can you check with a network trace that it actually turns > off ssl, so nothing is broken there? > > One thing that could be taking the time is an extra roundtrip -- e.g. it > tries to connect with ssl fails and retries without. A networ

Re: [HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Magnus Hagander
On Tue, Jun 7, 2016 at 11:31 AM, Pavel Stehule wrote: > > > 2016-06-07 11:29 GMT+02:00 Magnus Hagander : > >> >> >> On Tue, Jun 7, 2016 at 11:24 AM, Pavel Stehule >> wrote: >> >>> Hi >>> >>> I am testing speed of connection to Postgres. >>> >>> The ssl connection is slower, and it is expected. B

Re: [HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Pavel Stehule
2016-06-07 11:29 GMT+02:00 Magnus Hagander : > > > On Tue, Jun 7, 2016 at 11:24 AM, Pavel Stehule > wrote: > >> Hi >> >> I am testing speed of connection to Postgres. >> >> The ssl connection is slower, and it is expected. But when I configure >> pg_hba.conf to disable ssl via hostnossl, then ssl

Re: [HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Magnus Hagander
On Tue, Jun 7, 2016 at 11:24 AM, Pavel Stehule wrote: > Hi > > I am testing speed of connection to Postgres. > > The ssl connection is slower, and it is expected. But when I configure > pg_hba.conf to disable ssl via hostnossl, then ssl is not used, but the > speed is similar to ssl. > > Is it ex

[HACKERS] slower connect from hostnossl clients

2016-06-07 Thread Pavel Stehule
Hi I am testing speed of connection to Postgres. The ssl connection is slower, and it is expected. But when I configure pg_hba.conf to disable ssl via hostnossl, then ssl is not used, but the speed is similar to ssl. Is it expected behave? Regards Pavel