I wrote a blog post about rustls performance on the server for the Prossimo blog; rustls comes out comparing well to the alternatives, and we’re still improving it!
memorysafety.org/blog/rustls-s…
Rustls Server-Side Performance
In past years, the Rustls project has been happy to receive substantial investments from the ISRG. One of our goals has been to improve performance without compromising on safety.Prossimo
Dieser Beitrag wurde bearbeitet. (7 Monate her)
daniel:// stenberg://
Als Antwort auf Dirkjan Ochtman • • •elrido
Als Antwort auf daniel:// stenberg:// • •They switched from ring to aws-lc-rs as the default crypto-provider in release 0.23.0 / 29th of February 2024. Both the above as well as the earlier blog post from last year (see the thank you section at the bottom) already takes this change into account.
On the other hand that suggests to me that a C-project like curl would not benefit from this library in terms of performance and could just use aws-lc directly. And I doubt curl has any intentions of switching to Rust as the main language.
Rustls to me seems useful for Rust projects that want to implement HTTPS clients or servers. I do use it in one of mine, but kept using ring as the crypto-provider as it is a little easier to build and the performance for my projects use cases is sufficient.
daniel:// stenberg://
Als Antwort auf elrido • • •@elrido comparing TLS performance is so much more than the crypto speed. OpenSSL and aws-lc probably run equal in a crypto test but AWS-LC drastically outperforms OpenSSL in TLS.
curl has experimental support for rustls since several years, there's nothing that prevents users to build curl with this.
highvoltage mag das.
elrido
Als Antwort auf daniel:// stenberg:// • — (Schweiz) •Right, so in that case, when users build curl against the rustls library instead of aws-lc or openssl, they will under the cover use aws-lc-rs, which is a rust wrapper on top of aws-lc.
So what I then would be interested, too, would be to see a comparison of the performance of different uses of curl built with different TLS-backends. I would naively expect it to perform better when using aws-lc natively, instead of using the rustls -> aws-lc-rs -> aws-lc indirection. I might be wrong
- and there may be other benefits to using rustls with curl.
daniel:// stenberg://
Als Antwort auf elrido • • •elrido mag das.