Обсуждение: OpenSSL v3 performance regressions

Поиск
Список
Период
Сортировка

OpenSSL v3 performance regressions

От
Adrien Nayrat
Дата:
Hello,


I read this article from Haproxy, they noticed OpenSSL v3 has huge 
performance regressions :
https://github.com/haproxy/wiki/wiki/SSL-Libraries-Support-Status#openssl

This is a known issue : 
https://github.com/openssl/openssl/issues/17627#issuecomment-1060123659

Unfortunately, v3 is shipped with many distributions (Debian, Redhat, 
Rockylinux...) : https://pkgs.org/search/?q=openssl

I am afraid of users will face performance issues once they update their 
distro.

Does someone already encounter problems? Should Postgres support 
alternative SSL libraries has HAProxy?

Regards,

-- 
Adrien NAYRAT




Re: OpenSSL v3 performance regressions

От
Daniel Gustafsson
Дата:
> On 26 Sep 2023, at 10:36, Adrien Nayrat <adrien.nayrat@anayrat.info> wrote:

> Should Postgres support alternative SSL libraries has HAProxy?

PostgreSQL can be built with LibreSSL instead of OpenSSL, which may or may not
be a better option performance wise for a particular application.  Benchmarking
your workload is key to understanding performance, a lot of the regressions
pointed to in that blogpost wont affect postgres.

--
Daniel Gustafsson