OpenSSL v3 performance regressions

Started by Adrien Nayratover 2 years ago2 messages
#1Adrien Nayrat
adrien.nayrat@anayrat.info

Hello,

I read this article from Haproxy, they noticed OpenSSL v3 has huge
performance regressions :
https://github.com/haproxy/wiki/wiki/SSL-Libraries-Support-Status#openssl

This is a known issue :
https://github.com/openssl/openssl/issues/17627#issuecomment-1060123659

Unfortunately, v3 is shipped with many distributions (Debian, Redhat,
Rockylinux...) : https://pkgs.org/search/?q=openssl

I am afraid of users will face performance issues once they update their
distro.

Does someone already encounter problems? Should Postgres support
alternative SSL libraries has HAProxy?

Regards,

--
Adrien NAYRAT

#2Daniel Gustafsson
daniel@yesql.se
In reply to: Adrien Nayrat (#1)
Re: OpenSSL v3 performance regressions

On 26 Sep 2023, at 10:36, Adrien Nayrat <adrien.nayrat@anayrat.info> wrote:

Should Postgres support alternative SSL libraries has HAProxy?

PostgreSQL can be built with LibreSSL instead of OpenSSL, which may or may not
be a better option performance wise for a particular application. Benchmarking
your workload is key to understanding performance, a lot of the regressions
pointed to in that blogpost wont affect postgres.

--
Daniel Gustafsson