6.5.5. Performance Tools for SSL/TLS Configuration - 5.2 English - 57404

1. openssl s_time

   • This tool measures SSL/TLS connection performance and is used for testing cipher suites.

   • Use the custom OpenSSL binary to run the test.

     $ openssl s_time -connect <nginx_server_url>:443 -time 1 -new -cipher 'AES128-GCM-SHA256'
     

   connect: specifies the server and port, -cipher: cipher suites for connection, -time: run time (default: 30sec)

2. wrk

   • A HTTP benchmarking tool that generates significant load on a server, measuring latency, requests/sec, and transfers/sec.

     $ sudo apt install wrk
     $ wrk -t 10 -c 100 -d10s https://<nginx_server_url>:443/
     

   This command runs a 10-second test with 10 threads and 100 HTTP connections.

3. ApacheBench ‘ab’

   • A single-threaded command-line tool for benchmarking HTTP web servers.

   • Used for SSL handshake performance and data transfer analysis.

     $ sudo apt install apache2-utils
     $ ab -n 1000 -c100 https://<nginx_server_url>/index.html
     

   -n: number of requests, -c: concurrent requests. This sends 1000 requests with 100 concurrent connections.

Use the methods and tools mentioned to verify and assess the Nginx web server. There are similar SSL-based applications where we integrate AOCL-Cryptography provider to optimize the performance and usage.