Harri,

On 8/12/24 03:26, Harri Pesonen wrote:
Tomcat native gives much better SSL connection performance, they say.
At least in Windows. I have not personally performed any tests though.

https://tomcat.apache.org/tomcat-9.0-doc/apr.html

I would love for you to do some of your own benchmarking to confirm.

If you are using libtcnative along with the NIO connector (which is the default configuration for Tomcat 9), then you are not using APR for sockets, buffers, and such. This will perform identically to the Java-provided cryptographic provider-based connector (for the sockets and buffers) but may have fewer buffer-copies in- and out- of the native realm. So a potential performance improvement over the APR connector.

Anyway.

The libtcnative library of course uses OpenSSL for cryptographic primitives which have historically been much faster than those provided by Java. IIRC, jfclere identified a JVM bug which causes older versions of Java to fail to detect hardware support for certain cryptographic algorithms (specifically, AES!) which caused the software-based implementation to be used instead. Also IIRC, jfclere says that this has been fixed "in recent JVMs" but I'm not sure of the details of which version(s) contain such a fix.

So I'd be quite happy to see if you see any significant difference between the two connectors (NIO+OpenSSL and NIO+JSSE) in your environment, Java version, etc.

-chris

-----Original Message-----
From: Christopher Schultz <ch...@christopherschultz.net>
Sent: lauantai 10. elokuuta 2024 0.51
To: users@tomcat.apache.org
Subject: Re: [Semi OT] Suggestion: Maven repository for Tomcat native library

Harri,

On 8/9/24 05:56, Harri Pesonen wrote:
Hello, currently Tomcat native library needs to be downloaded manually from 
here:

https://tomcat.apache.org/download-native.cgi

It would be better to download it from Maven repository, so that we could 
upgrade the version easier using Maven scripts.
Also we could see easier when the version needs to be upgraded.
Normally Maven repository contains only Java artifacts, but it is possible to 
upload binaries as well.
For example Microsoft JDBC driver has Java .jar in on artifact, and native .dll 
in separate artifact:

https://mvnrepository.com/artifact/com.microsoft.sqlserver/mssql-jdbc_auth/12.8.0.x64

What say you?

I'm just academically curious: what do you need tcnative for?

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to