slow SSL Apache on DS25 ?

From: Marc Thoelen (marc.thoelen_at_luc.ac.be)
Date: 02/03/05

  • Next message: Juan Carlos Cruz: "SUMMARY: Installing a SVGA PBXGB-AA in an AlphaSerer 800" 
    Date: Thu, 03 Feb 2005 09:30:31 +0100
To: tru64-unix-managers@ornl.gov

    Dear colleagues,

    Last september we replaced our (very) old DPW433au Digital Workstation by an
    AlphaServer DS25. The machine is mainly used for mail for some 3000 students.
    All mail is read through webmail (IMP), and is handled by an SSL
    HTTP-apacheserver.

    Now: before this change the webmail-server was running on an ordinary Pentium
    PC
    with Linux, so the DPW-station did not handle the webmail itself. This situation
    worked perfect.

    On the new station, we want to integrate both functions, i.e. 'mail store' +
    webmail-functionality. However it turns out that the SSL HTTP-client, on the
    DS25, is extremely CPU-intensive, with up to 5 or even 10 % CPU per client. Of
    course this dramatically slows downs our DS25.
    Funny thing is we never had trouble when webmail was running on the Pentium-PC.
    Our 'guess' is that there is an issue with the SSL-version of Apache for
    Tru64Unix. Does anybody on the list have several experiences and/or a solution
    ?

    These are more detailed specs:

    - Apache 1.3.33
    - OpenSSL 0.9.7e
    - PHP 4.3.10
    - IMP 3.2.7

    Apache runs quite well without SSL , however WITH SSL we notice a huge
    CPU-load...

    Thanks in advance; i will summarize back to the list,

    Marc 

    -- 
Marc Thoelen
CID (Centrale Informatica Dienst)
Cel NEC (Netwerken, Externe communicatie en Communicatie-Servers)
Limburgs Universitair Centrum, gebouw D
Universitaire Campus
B-3590     DIEPENBEEK
Tel. +32 11 26 81 30
Fax. +32 11 26 81 99
email : marc.thoelen@luc.ac.be
----- End forwarded message -----
-- 
Marc Thoelen
CID (Centrale Informatica Dienst)
Cel NEC (Netwerken, Externe communicatie en Communicatie-Servers)
Limburgs Universitair Centrum, gebouw D
Universitaire Campus
B-3590     DIEPENBEEK
Tel. +32 11 26 81 30
Fax. +32 11 26 81 99
email : marc.thoelen@luc.ac.be
  • Next message: Juan Carlos Cruz: "SUMMARY: Installing a SVGA PBXGB-AA in an AlphaSerer 800"

    Relevant Pages

    • Re: webmail server & getpwnam "inherently unreliable" -- Precisely why is that?
      ... > but in the end the machine is still using the same old smtp plain text ... This is a huge security risk, but you can get around it safely if the ... Webmail is only available through SSL ...
      (comp.os.linux.security)
    • Re: webmail server & getpwnam "inherently unreliable" -- Precisely why is that?
      ... > but in the end the machine is still using the same old smtp plain text ... This is a huge security risk, but you can get around it safely if the ... Webmail is only available through SSL ...
      (comp.security.unix)
    • Re: Free Webmail w/ SSL?
      ... atleast from my experience only offers ssl login ... Googling today I've found webmail ... but not SSL of the entire webmail session. ...
      (Security-Basics)
    • webmail ssl
      ... I have a http://www.webmailasp.net/ webmail set up on my server. ... This is a UNIX that uses ... Has anyone tried to use this or any other webmail with ssl?? ...
      (microsoft.public.inetserver.asp.general)