SSL on MQ : CPU Performance -



SSL on MQ : CPU Performance -

i deploy ssl on mq server know if current cpu capacity back upwards ssl. (i not have budget increment number of cpu cores , mq pvu)

my specs:

windows 2003 server sp2, 1 core of intel xeon cpu e5-2690 2.9ghz, 2 gb ram, 1 qmgr, linear logging, persistants messages, dqm 5 parteners, 10 senders channels, 10 receivers channels

for month:

we exchange in average 3 1000000 messages our partners on total of 15gbytes of data. (so 5k per message). had in average variations of cpu between 20% , 40% had 4 peaks of 100% cpu

do think scheme can cope ssl cipher rc4_md5_export ?

best regards,

pascal

i don't think it's possible provide definitive reply whether server can cope enabling ssl using rc4_md5_export cipher on mq channels short of trying , assessing impact. may want take @ processor queue length using windows performance monitor tool see how many processes waiting cpu time when usage increases.

as cpu provides hardware back upwards aes encryption algorithm may want consider using 1 of aes cipherspecs instead. has advantage of providing improve security both md5 , rc4 weak in terms of hashing , encryption.

one alternative consider installing ssl acceleration card in server allow messages encrypted/hashed using dedicated hardware rather server's cpu. page http://www-01.ibm.com/support/knowledgecenter/#!/ssfksj_7.5.0/com.ibm.mq.ref.doc/q049300_.htm on ibm knowledge center provide farther info , lists cards supported websphere mq.

performance ssl cpu mq

Comments

Post a Comment

Popular posts from this blog

xslt - DocBook 5 to PDF transform failing with error: "fo:flow" is missing child elements. Required content model: marker* -

xslt - DocBook 5 to PDF transform failing with error: "fo:flow" is missing child elements. Required content model: marker* - i've inherited doc publishing process takes docbook , builds html , pdf output, using apache fop both. project had been started, never completed. lots of tweaking, i've able of doc sets build (20+), except handful, , fail severe code 1 of these 2 conditions: "fo:flow" missing kid elements. required content model: marker* "fo:block" not valid kid of "fo:root" the xml output comes out of docbook , docbook-fop checks out well-formed. the fop error in 1 book, "endecagloss", example, points end of string: <fo:flow flow-name="xsl-region-body" start-indent="4pc" end-indent="0pt"/> here’s log output in case: [java] severe: javax.xml.transform.transformerexception: file:/scratch/publishing/hudson/jobs/build-main-endeca-documentation/workspace/serverdoc/w...
Read more

mediawiki - How do I insert tables inside infoboxes on Wikia pages? -

mediawiki - How do I insert tables inside infoboxes on Wikia pages? - i want insert tables in infoboxes. example, have proteinbox i've developed using infobox template (http://health-and-medicine.wikia.com/wiki/template:proteinbox), , fasta field big fit comfortably in proteinbox. hence collapsible table within box. this tried: {{infobox | row 1 = {| class = "mw-collapsible mw-collapsed wikitable" |- | <!-- table content --> |} }} your problem is, putting nested table within template. pipe characters ( | ) in table syntax collides pipe usage in templates. the commonly used hack around create template called template:! , containing pipe character, , utilize when need set tables, parser functions or other stuff using pipe characters, within templates. table (with every | replaced {{!}} ): {{{!}} {{!}}- {{!}} a1 {{!}} b1 {{!}}- {{!}} a2 {{!}} b2 {{!}}} ...the equivalent of {| |- | a1 | b1 |- | a2 | b2 |} furthermore, hav...
Read more

Local Service User Logged into Windows -

Local Service User Logged into Windows - i created windows service tracks app server user connected through load balancer. it retrieves user logged windows on machine, cross references active directory (ad) business relationship homecoming first name, lastly name , e-mail (for notification through website created project) there 1 scheme on network users remote system, vista system, reason returning values "local service" logged machine, it's weird , security guys impossible "local service" business relationship logged windows. here how user logged windows managementscope ms = new managementscope("\\\\.\\root\\cimv2"); objectquery query = new objectquery("select * win32_computersystem"); managementobjectsearcher searcher = new managementobjectsearcher(ms, query); foreach (managementobject mo in searcher.get()) { _username = mo["username"].tostring(); } // remove domain part username string[] usernameparts = _...
Read more