response time https/http using CSM+SSL versus CSM

[v.kreisel]

Im using C6K and CSM for load balancing and an SSL module for https termination. That means clients can access the serverfarm through https/http and compare response time values.

What should be the expected delay generated from SSL(https) compared to cleartext(http) ?

My customers are complaining about to much delay...

Thanks in advance for your answer.

Volker

[Gilles Dufour]

it's difficult to answer.

There will be an initial delay required to establish the ssl session, then for each packet there will be additional delay to encrypt/decrypt the packet.

It also depends on load.

An CSM can handle lot of traffic but not an SSLM.

So, if you see something wrong in a sniffer trace like packet drops, retransmits, huge delays per packet [like 300ms], then we need to investigate what is going on.

Otherwise, this would be normal.

Regards,

Gilles.