Article delegate-en <_A4121@delegate-en.ML_>
  upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[delegate-en/4121] [Reference:<_A4118@delegate-en.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] Re: performance measurements and socks question
11 Sep 2008 02:51:23 GMT (Yutaka Sato)
The DeleGate Project


In message <_A4118@delegate-en.ML_> on 09/10/08(20:17:55)
you Andre <> wrote:
 |We did some performance measurements with Delegated and Squid in our research group. Our setup builds a chain of 3 SSL
 |proxies using the CONNECT command of HTTP. We would like to share our findings with you.
 |Maybe your are able to shed some light on the difference in the connection time.
 |As a configuration file we use

Note that disabling the SSL cache with "TLSCONF=cache:no" will reduce
the performance, possibly significantly.
Also conditional SSL with "STLS=-fcl" (not with "STLS=fcl") might
reduce the performance.

 |We would also like to know whether it is possible to use the BIND command to open a specific port on the SOCKS server
 |not just for one client connection, but for multiple client connections.

Is it possible with other implementations of a SOCKS server?
Since the tcp connection established by the BIND command on the SOCKS
protocol becomes a transparent connection with the remote peer after
the ACCEPT command, there is no chance to reuse it for another ACCEPT.

 |If this is not originally intended, might
 |this possibly a future feature?

It needs to extend the specification of SOCKS protocol.
This was one of the reasons I made the "VSAP" protocol to realize such
functionality ten years ago.
<URL:> (in Japanese)

  9 9   Yutaka Sato <>
 ( ~ )  National Institute of Advanced Industrial Science and Technology
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]