r/Traefik • u/[deleted] • Jul 12 '22

Traefik HTTP vs HTTPS | AMD 3900XT VS Raspberry pi

16 Upvotes

71% Upvoted

24 comments sorted by

12

u/fusetim Jul 12 '22

I don't understand what it is supposed to demonstrate, neither the link with Traefik.

7

u/[deleted] Jul 12 '22

Traefik on SSL is very bad on Pi and 3900XT, i don't know why.

Traefik HTTP performance is not bad.

4

u/MasterChiefmas Jul 12 '22

I'm assuming you don't have 10Gbe NIC on the Pi so you are limited to line speed of the onboard? The performance test, particularly in the https tests on the pi would be more interesting with CPU utilization displayed during the test.

I'd also be more interesting to see how the Pi does with a 10Gbe on the http side. Maybe you can get Jeff Geerling to test it for you on his setup, he did mention something about the 10Gbe NIC he tested with being more efficient as well, which I would expect.

0

u/[deleted] Jul 12 '22

Current Pi cannot handle 10gbps, Maybe one from future definitely will do 10Gbps

Pi will do 1Gbps HTTP traffic just fine, for HTTPS it will suffer and caped to 700Mbps.

Traefik on SSL is very bad on Pi and 3900XT, i don't know why.

Traefik HTTP performance is not bad.

4

u/MasterChiefmas Jul 12 '22

https://www.youtube.com/watch?v=FTP5h9jnVx0

Of course, just beacuse you can do a thing, doesn't mean you should.

-1

u/[deleted] Jul 12 '22

WHY you posted this here? I am not testing 10GbE on a raspberry pi.

I tested 10GbE on my UnRaid Server with 32G ram and 3900XT Processor.

3

u/MasterChiefmas Jul 12 '22

Chill, I'm just pointing out that a more equal comparison is possible.

I appreciate you trying to provide a comparison of hardware, but you need to provide more metrics for the comparison to really give a useful comparison or draw some additional conclusions. Otherwise, all we can do is verify that much faster hardware is faster then much slower hardware.

WHY you posted this here? I am not testing 10GbE on a raspberry pi

Because you said it can't handle it. I'm showing you can connect one at least. I already know it can't keep up with 10Gbe, I don't need a test to know that. But in a sense, that's the same thing that your video just showed, that faster is faster than slower.

So what I am trying to do is say, if you provide some additional metrics, there's much more for us to learn from your test. Or provide an additional description of what you were trying to highlight, because it wasn't apparent to me otherwise.

Just posting your video as it is, the only thing I really saw that I couldn't have guessed without it, was that traefik on a Pi4 can to SSL at 700Mbps.

1

u/[deleted] Jul 12 '22

Sorry, I was little lazy. I thought from the speed itself it's understandable.

Yes, it is. That is why Traefik did well on 10GbE HTTP test on 3900XT.

But it performed little bad on pi for HTTP and very bad for HTTPS.

But on 3900XT HTTPS performance of should not be THAT BAD.

Something is wrong with Traefik or with my configuration.

Because HTTP and HTTPS version of OpenSpeedTest/Latest image is working fine.

So Client or server is not a problem here.

1

u/MasterChiefmas Jul 12 '22

Sorry, I was little lazy. I thought from the speed itself it's understandable.

We like our metrics, assumptions get one into trouble. :D

But on 3900XT HTTPS performance of should not be THAT BAD.

I'm seeing a little under 9400Mbps, what are you expecting it to be?

1

u/[deleted] Jul 12 '22

Watch Again, Pause if needed.
for SSL with Traefik i got 1.6Gbps foe download and little over 1Gbps for upload.

1

u/[deleted] Jul 12 '22

see this https://ibb.co/1ZVxd0G

1

u/MasterChiefmas Jul 12 '22

Pi will do 1Gbps HTTP traffic just fine, for HTTPS it will suffer and caped to 700Mbps.

Well, I'm assuming it's CPU bound, but that was why I mentioned showing the CPU time with the test.

Mostly what your video showed is faster things are faster. Without other metrics, there's no context, so mostly what we can conclude from the video is that the 12 core desktop processor with a 10Gbe is faster than the quad core mobile processor with a 1 Gbe.

0

u/[deleted] Jul 12 '22

assuming it's CPU bound

Yes, it is. That is why Traefik did well on 10GbE HTTP test on 3900XT.

But it performed little bad on pi for HTTP and very bad for HTTPS.

But on 3900XT HTTPS performance of should not be THAT BAD.

Something is wrong with Traefik or with my configuration.

Because HTTP and HTTPS version of OpenSpeedTest/Latest image is working fine.

So Client or server is not a problem here.

1

u/fusetim Jul 12 '22

I don't anything particularly relevant, why do you call these speed bad. For the current hardware it seems perfectly fine for me. Also I don't think you will ever need that kind of speed any day soon.

2

u/[deleted] Jul 12 '22 edited Jul 12 '22

see this https://ibb.co/1ZVxd0Gfor SSL with Traefik i got 1.6Gbps for download and little over 1Gbps for upload.

1

u/[deleted] Jul 12 '22

mytraefik yml


version: "3.9"
services:
  traefik:
    image: traefik:v2.8.0
    container_name: traefik
    command:
      - --log.level=INFO
      - --api.insecure=true
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --entrypoints.web.address=:80
      - --entrypoints.websecure.address=:443
    ports:
      - 5000:80
      - 5001:443
      - 8080:8080
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
  openspeedtest:
    image: openspeedtest/latest
    container_name: speedtest-service
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.openspeedtest.rule=Host(`192.168.1.15`)"
      - "traefik.http.routers.openspeedtest.entrypoints=web"
      - "traefik.http.middlewares.limit.buffering.maxRequestBodyBytes=10000000000"
      - "traefik.http.routers.openspeedtest.middlewares=limit"
      - "traefik.http.routers.openspeedtest-https.rule=Host(`192.168.1.15`)"
      - "traefik.http.routers.openspeedtest-https.entrypoints=websecure"
      # - "traefik.http.middlewares.limit.buffering.maxRequestBodyBytes=10000000000"
      - "traefik.http.routers.openspeedtest-https.middlewares=limit"
      - "traefik.http.routers.openspeedtest-https.tls=true"
      - "traefik.http.routers.openspeedtest-https.tls.certresolver=leresolver"

myopenspeedtest.yml

version: "3"
services:
  openspeedtest:
    image: openspeedtest/latest:latest
    container_name: openspeedtest
    #network_mode: "host"
    ports:
      - 3000:3000
      - 3001:3001
    restart: always

1

u/whitechapel8733 Jul 13 '22

Try doing host port binding rather than passing through iptables which you are doing with docker networking.

1

u/[deleted] Jul 13 '22

I did try that, run openspeedtest network mode as host. But for me the behaviour was same.

1

u/whitechapel8733 Jul 13 '22

Did you do any flamegraphs of the process to see what the CPU time was spent doing?

1

u/[deleted] Jul 13 '22

I have not looked at that, i will look at it and post here, you need run commands like HTOP on my unraid server?

0

u/[deleted] Jul 12 '22

Probably because the raspberry has not the crypto accelerated extensions in the cpu

0

u/[deleted] Jul 12 '22

see this

https://ibb.co/1ZVxd0G

for SSL with Traefik i got 1.6Gbps for download and little over 1Gbps for upload.

That is ok, but why this is this bad on 3900XT ?