>> Hm, I haven't tried Apache yet but would that be a huge benefit compared
>> to a setup using nbproc> 1?
>
> I haven't tried it either, but yes, I would assume so.
To be more specific: the number of TLS handshakes would probably be
similar, especially in a nbproc>1 configuration, but when you hit that
limit, haproxy or nginx would likely struggle with the load because of
all the blocking.
So while your handshakes per second number may be similar, you would
probably have a performance drop for the actual traffic, I suspect.
Lukas
>> to a setup using nbproc> 1?
>
> I haven't tried it either, but yes, I would assume so.
To be more specific: the number of TLS handshakes would probably be
similar, especially in a nbproc>1 configuration, but when you hit that
limit, haproxy or nginx would likely struggle with the load because of
all the blocking.
So while your handshakes per second number may be similar, you would
probably have a performance drop for the actual traffic, I suspect.
Lukas