This repo contains the code, benchmark suite, and the analysis of using the Conscrypt JCE Security provider that is available to Dropwizard 1.3 users. See the complementary post, Dropwizard 1.3 Upcoming TLS Improvements for additional background and information.
This repo also demonstrates how easy it is to add Conscrypt as the ALPN provider so one doesn't need to modify the boot class path with a JRE version specific jar.
- Install Docker and Docker Compose (at least 1.20)
- Execute
./bench.shas a user that can use docker and wait a couple hours - Resulting benchmarks will be in
out.csv - Chart of the data can be see in
analysis.R
Crunch out.csv anyway you want, but if you want to replicate the graph below, use analysis.R
For response / request payloads around 100KB or more, where most of the work comes from encrypting or decrypting a response (like in an echo server seen here), expect to see 7.5x throughput improvement for h2 services and 2.5x for HTTPS 1.1.