nanog mailing list archives

Re: latest Snowden docs show NSA intercepts all Google and Yahoo DC-to-DC traffic


From: Niels Bakker <niels=nanog () bakker net>
Date: Fri, 1 Nov 2013 23:26:26 +0100

* mikal () stillhq com (Michael Still) [Fri 01 Nov 2013, 05:27 CET]:
Its about the CPU cost of the crypto. I was once told the number of CPUs required to do SSL on web search (which I have now forgotten) and it was a bigger number than you'd expect -- certainly hundreds.

False: https://www.imperialviolet.org/2010/06/25/overclocking-ssl.html

"On our production frontend machines, SSL/TLS accounts for less than 1% of the CPU load, less than 10KB of memory per connection and less than 2% of network overhead. Many people believe that SSL takes a lot of CPU time and we hope the above numbers (public for the first time) will help to dispel that."


        -- Niels.


Current thread: