Re: Speed of OWA connectivity?
From: al (ask~me_at_nowhere.com)
Date: 03/10/04
- Next message: Bryan Velkinburg: "character set not supported Internet Service"
- Previous message: Someone: "Re: Notes and Outlook"
- In reply to: Tim Hackbart [MSFT]: "Re: Speed of OWA connectivity?"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 10 Mar 2004 19:30:57 -0000
"Tim Hackbart [MSFT]" <Timhack@online.microsoft.com> wrote in message
news:uM76G%23sBEHA.2308@tk2msftngp13.phx.gbl...
> al
>
> The thing that jumps out to me is the SSL overhead. The encryptions and
> decryption definitely has a cost associated with it, as far as processor
> time etc.
Well me too - which I why I thought the CPU usage would reveal if that were
the case. However the CPU is steady around 3%!
>
> I would try to take SSL out of the picture.
> Where do you terminate your SSL connection?
SSL terminates both at the ISA and the FE server. I say both, as the ISA
will always decrypt the SSL to examine the packets and then re-package it to
send via SSL to the FE server (maintaining the SSL namespace by using a
manual hosts entry).
> If you do it on the ISA box and then bridge HTTP to the FE server, then I
> would test hitting the FE server with HTTP and then compare with going
> through the ISA box.
Non-SSL to the FE server is fast internally. I can't enable normal HTTP
through the firewalls - too many configuration changes to live systems that
would need change controls raising!!
> If you terminate SSL on the ISA box and then bridge HTTPS to the FE server
> then your SSL cost is doubled.
>
Oh, that sounds like what I said before I think, so yes, but isn't the SSL
cost down to CPU time?
> I am not sure that the SSL process is the issue, but it would be something
> to look at.
It certainly was my first guess - just don't know how to establish it given
my CPU results. I believe you can buy SSL-offloading network cards these
days? I've used IPSEC-offloading ones before and not noticed any
difference, but then it was a low-capacity server.
Anyone else used one of these cards and have an opinion?
a
- Next message: Bryan Velkinburg: "character set not supported Internet Service"
- Previous message: Someone: "Re: Notes and Outlook"
- In reply to: Tim Hackbart [MSFT]: "Re: Speed of OWA connectivity?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
