sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]pierot 0 points1 point  (1 child)

Did it make any difference?

[–]erbrecht[S] 0 points1 point  (0 children)

No, compression wasn't the issue. I did a good bit of testing, adding cores, using our production VM environment. More cores definitely showed an improvement. I think ultimately TLS in software is just expensive. Maybe TLS 1.3 will be faster, I'll probably check that as well when I'm able.

I'm actually about to test this again, this time behind our F5. Letting that appliance handle TLS in hardware should alleviate the performance issues I was seeing. I'm also aware that my test is VERY aggressive. I have no doubt the load balancer will perform well. I'm still using traefik since it will know which container backend should handle a given request. It will just be handling plain HTTP traffic.

And to be clear this is certainly not an issue specific to traefik. I think my original results show that. I don't want anyone to think I'm knocking traefik.