Recommendation about / Thorsten Kramm <kramm@abacho.net>

Helo Pound Users,

has anyone a good recommendation about which SSL-Accelerator card to use.
Or is it necessary to use a  a hardware based SSL-Accelerator?
We plan to use pound in front of of server group which makes 5000
HTTP-Requests/min. The half of the requests are HTTPS and should be 
terminated by pound.
Actually we use a Intel Xeon Dualcore CPU for the loadbalancer.

Thanks for your suggestions.

Kind regards,


Mit freundlichen Grüßen,
Abacho Aktiengesellschaft

i. A. Thorsten Kramm
Systemadministrator


* Wir stellen ein: *
Systemadministrator Linux, PHP/MySQL Programmierer
http://jobs.abacho.net

---------------------------------------------------------------
Abacho Aktiengesellschaft       E-Mail:        Kramm(at)Abacho.net
Gerhard-Hoehme-Allee 1          Telefon:   +49 (0)2131 5606-245
41466 Neuss                     Telefax:   +49 (0)2131 5606- 99
---------------------------------------------------------------
Vorstand:                          Ingo Endemann (Vorsitzender)
                                                Andreas Stietzel
Vorsitzender des Aufsichtsrates:             Dr. Gereon Mertens
Sitz der Gesellschaft: Neuss    Handelsregister Neuss, HRB 9736
---------------------------------------------------------------

Re: [Pound Mailing List] Recommendation about
Michal Taborsky - Internet Mall <michal.taborsky(at)mall.cz>

2007-12-06 10:06:27

[ FULL ]

Hello Thorsten,

you must definitely test it yourself, but I'd think, that for this kind 
of load (40 req/s) you don't need a SSL accelerator card. The dual-core 
Xeon should be able to handle it. But of course it also depends on what 
your response time requirements are.

MT.

Thorsten Kramm napsal(a):[...]

[...]

Re: [Pound Mailing List] Recommendation about
Sven Ulland <sveniu(at)opera.com>

2007-12-06 14:17:16

[ FULL ]

Thorsten Kramm wrote:[...]

Some unscientific testing we did with pound and SSL gave us a result
of ~450 new connections per second on one of our standard servers.
The server is a HP blade with two Opteron 2.6 GHz CPUs (four cores in
total). We are able to scale this horizontally by putting LVS in front
of our pounds.

There's an astonishing lack of good information about accelerator
hardware that can be used with OpenSSL. There are some seemingly good
resources, but they are typically very outdated. It seems that many
just give in to the big players such as f5's big-ip, etc.

If anyone on the list could add recent experiences with SSL
accelerator hardware, please do.

S