[SR-Users] TLS performance testing

[Daniel-Constantin Mierla]

On 12/20/11 11:55 PM, Kristian Kielhofner wrote:
> On Tue, Dec 20, 2011 at 5:20 PM, Daniel-Constantin Mierla
> <miconda at gmail.com>  wrote:
>> Hello,
>>
>> with tls the limit is usually the cpu or memory, due to
>> encryption/decryption, but you say they look ok.
>>
>> What log level are you using in config?
>>
>> Is the test tool keeping the tls connections open or they are closed and
>> have to be open for each call? Can you spot if the delay is on incoming side
>> or on outgoing? Wireshark can decrypt the traffic if you provide the
>> certificate and start the sniffing before starting tls connections.
>> Alternative, set:
>>
>> modparam("tls", "cipher_list", "NULL")
>>
>> and the traffic should be no longer encrypted, but this will not show if the
>> bottleneck is the encryption process.
>>
>> Also, benchmark module can help to see if execution of config file takes
>> longer than usual.
>>
>> Jan Janak did tls tests some time ago, the summary is part of:
>>
>> http://sip-router.org/wiki/performance/v3.0-capacity
>>
>> I have some results from a test with 6000 SIP messages/sec over tls, where
>> CPU usage got about 60%. I guess something is becoming a bottleneck in your
>> case, very likely a blocking operation since cpu is ok, just has to be
>> discovered.
>>
>> Cheers,
>> Daniel
>>
>> --
>> Daniel-Constantin Mierla -- http://www.asipto.com
>> http://linkedin.com/in/miconda -- http://twitter.com/miconda
>>
> Daniel,
>
>    Thank you for getting back to me so quickly.
>
>    The log level is the default (debug=2).  I tried setting cipher_list
> to NULL on client and server and now Kamailio has crashed (producing
> core file) during the last seven tests.  It seems I can get to about
> 1000 registered users before this happens.  How should I provide a
> backtrace?
>
>    Once I get past this issue I will try your other suggestions.
interesting, let's see who is fault of that -- backtrace:

gdb /path/to/kamailio /path/to/corefile

- for short backtrace:

bt

- for full backtrace:

bt full

Provide both of them.

Cheers,
Daniel
-- 
Daniel-Constantin Mierla -- http://www.asipto.com
http://linkedin.com/in/miconda -- http://twitter.com/miconda