Fasthttp: How about the performance of ssl based on fasthttp?

[gogoods]

Benchmark of ssl's performance compared with nginx would be much appreciated!

Thanks very much :smile:

[erikdubbelboer]

I can already tell you that nginx is going to be a lot fast, somewhere around 3x to 10x faster. This has nothing to do with fasthttp and is completely because of the Golang crypto stack being written in Go. This means it doesn't have the decades of performance optimizations that other stacks like OpenSSL have.

More on this can be found in these issues: https://github.com/golang/go/issues/21525 and https://github.com/golang/go/issues/22807

[HenkVanMaanen]

Would it be faster to proxy the ssl request from nginx to the golang application than connecting directly with ssl to the golang application?

[illotum]

Almost everything will run faster if you terminate TLS on load-balancer/nginx cache.

Back to Go, I have investigated this pretty closely: elliptic curve crypto is quite optimized in crypto/tls, thus will be the closest to c-level libraries' performance, at least in the same order of magnitude.

That unfortunately means full stack, including ecdsa signatures and elliptic cert keys.