Thread

1. OpenSSL v3 performance regressions

   Adrien Nayrat <adrien.nayrat@anayrat.info> — 2023-09-26T08:36:22Z

   Hello,
   
   
   I read this article from Haproxy, they noticed OpenSSL v3 has huge 
   performance regressions :
   https://github.com/haproxy/wiki/wiki/SSL-Libraries-Support-Status#openssl
   
   This is a known issue : 
   https://github.com/openssl/openssl/issues/17627#issuecomment-1060123659
   
   Unfortunately, v3 is shipped with many distributions (Debian, Redhat, 
   Rockylinux...) : https://pkgs.org/search/?q=openssl
   
   I am afraid of users will face performance issues once they update their 
   distro.
   
   Does someone already encounter problems? Should Postgres support 
   alternative SSL libraries has HAProxy?
   
   Regards,
   
   -- 
   Adrien NAYRAT
   
   
   
   
   

2. Re: OpenSSL v3 performance regressions

   Daniel Gustafsson <daniel@yesql.se> — 2023-09-26T08:52:06Z

   > On 26 Sep 2023, at 10:36, Adrien Nayrat <adrien.nayrat@anayrat.info> wrote:
   
   > Should Postgres support alternative SSL libraries has HAProxy?
   
   PostgreSQL can be built with LibreSSL instead of OpenSSL, which may or may not
   be a better option performance wise for a particular application.  Benchmarking
   your workload is key to understanding performance, a lot of the regressions
   pointed to in that blogpost wont affect postgres.
   
   --
   Daniel Gustafsson