romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-06 07:16:14 +03:00
Code Issues Projects Releases Packages Wiki Activity

openssl: enable readahead

Browse source 
Speeds up TLS operations up to ~%13.

Closes #17548

Signed-off-by: Edwin Török <edwin.torok@cloud.com>
This commit is contained in:
Edwin Török 2025-06-06 16:23:29 +01:00 • committed by Daniel Stenberg
parent 20c90ba298
commit aea336aa23
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 21 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

21
lib/vtls/openssl.c
View file

@ -122,6 +122,12 @@
static void ossl_provider_cleanup(struct Curl_easy *data);
#endif
#if (OPENSSL_VERSION_NUMBER >= 0x10100000L && \
!defined(LIBRESSL_VERSION_NUMBER) && \
!defined(OPENSSL_IS_BORINGSSL))
#define HAVE_SSL_CTX_SET_DEFAULT_READ_BUFFER_LEN 1
#endif
#include "../curlx/warnless.h"
/* The last #include files should be: */
@ -4112,6 +4118,21 @@ CURLcode Curl_ossl_ctx_init(struct ossl_ctx *octx,
}
SSL_CTX_set_options(octx->ssl_ctx, ctx_options);
SSL_CTX_set_read_ahead(octx->ssl_ctx, 1);
/* Max TLS1.2 record size 0x4000 + 0x800.
OpenSSL supports processing "jumbo TLS record" (8 TLS records) in one go
for some algorithms, so match that here.
Experimentation shows that a slightly larger buffer is needed
to avoid short reads.
However using a large buffer (8 packets) actually decreases performance.
4 packets is better.
*/
#ifdef HAVE_SSL_CTX_SET_DEFAULT_READ_BUFFER_LEN
SSL_CTX_set_default_read_buffer_len(octx->ssl_ctx, 0x401e * 4);
#endif
#ifdef SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER
/* We do retry writes sometimes from another buffer address */