[SoapRMI] Re: gsi is very slow with XSOAP

[Aleksander Slominski]

Warren Smith wrote:

> More importantly, we've found that using cog_delegation is amazingly,
> unbearably slow. I timed it at about 25-30 seconds for the first method
> call on a relatively new Sun box. This is much too slow for us to use. I
> assume that it is CoG that is slow, not XSOAP, but do you know if the
> globus folks are working on this?

hi,

i heard they plan to move away from IAIK in direction of JSSE and/or open source
SSL toolkit but did not hear recently anything about it.

> Do you have any ideas for how it can
> be sped up?

when we add HTTP keep-alive on client side then at least this cost will be only in
the first method call and next calls will be using already opened SSL channel ...

> I tried using just "cog" for the security model to see if
> that would do no delegation and go faster but it didn't seem to have any
> effect.

it *should* be faster!

> Is the IAIK library very slow? If CoG could be moved to JSSE,
> would that help?

SSL initial handshake is slow and using Java does not help. i do not think that
JSSE is much faster but do not have any hard data about it.

> I figure you've looked at this a bit so I thought I'd ask you these
> questions before I started bothering Gregor and Jarek.

we did not do any real performance timings as we are more concerned with getting
authorization to work and we are still not there ...

thanks,

alek