[SoapRMI] Re: gsi is very slow with XSOAP

Warren Smith wwsmith_at_arc.nasa.gov
Thu, 28 Mar 2002 09:22:00 -0800


Thanks for all the information...

Aleksander Slominski wrote:

>Warren Smith wrote:
>
>>More importantly, we've found that using cog_delegation is amazingly,
>>unbearably slow. I timed it at about 25-30 seconds for the first method
>>call on a relatively new Sun box. This is much too slow for us to use. I
>>assume that it is CoG that is slow, not XSOAP, but do you know if the
>>globus folks are working on this?
>>
>
>hi,
>
>i heard they plan to move away from IAIK in direction of JSSE and/or open source
>SSL toolkit but did not hear recently anything about it.
>
>>Do you have any ideas for how it can
>>be sped up?
>>
>
>when we add HTTP keep-alive on client side then at least this cost will be only in
>the first method call and next calls will be using already opened SSL channel ...
>
Yep, I did try this out a couple days ago to make sure XSOAP was doing this.

>>I tried using just "cog" for the security model to see if
>>that would do no delegation and go faster but it didn't seem to have any
>>effect.
>>
>
>it *should* be faster!
>
Hmm. I didn't use a timer for that one, so maybe it is faster, but I was 
feeling impatient so it didn't seem faster. :-)

>>Is the IAIK library very slow? If CoG could be moved to JSSE,
>>would that help?
>>
>
>SSL initial handshake is slow and using Java does not help. i do not think that
>JSSE is much faster but do not have any hard data about it.
>
>>I figure you've looked at this a bit so I thought I'd ask you these
>>questions before I started bothering Gregor and Jarek.
>>
>
>we did not do any real performance timings as we are more concerned with getting
>authorization to work and we are still not there ...
>

We'll have to find some time here to look at the performance of the 
various underlying libraries. The 25 seconds I saw, or even the 8-10 
seconds you measured are really too slow.


Warren