Rustls Multi-Threaded Performance Is Battering OpenSSL

[phoronix]

Phoronix: Rustls Multi-Threaded Performance Is Battering OpenSSL

The Rustls project as a modern TLS library written in the Rust programming language and an alternative to the likes of the widely-used OpenSSL and Cloudflare's BoringSSL has published some new performance figures. When looking at the multi-threaded server performance of Rustls, its performance is typically outperforming BoringSSL by a significant margin and downright dominating over OpenSSL...

https://www.phoronix.com/news/Rustls-Multi-Threading-Perf

[caligula]

OpenSSL is written in C, Assembly, and Perl. Those are all known for their shittiness in multi-core contexts. Perl is slow as hell. It's sad that the militant pink-lightblue-white coding sock community is winning because they're openly banning people from asking questions like in the std c++ committee. But it's great to see these piece of shit languages are slowly but surely dying. They're not really designed for modern post-2005 computers, anyways.

[rafanelli]

This is where Rust shines. Boring TLS is C++/Assembly/C, OpenSSL is C. Rustls is 100% Rust, only 8 years old, and seemingly outperforms the big name contenders. Imagine how much easier it is to optimize Rustls, compared to these memory-unsafe project written in dinosaur languages.

[madinside]

[…] It's sad that the militant pink-lightblue-white coding sock community is winning […]

They are just competent coders freed from dealing with harassment. What's not to like? Isn't it about merits?

[caligula]

They are just competent coders freed from dealing with harassment. What's not to like? Isn't it about merits?

Did you hear about the C++ std committee UB question case?

[Anux]

Nice. If I wanted to replace whichever TLS lib my distro uses, could I just install rustls or do I need to make links that point from old to new?

[Raka555]

The thing is the other implementations have decades of baggage. They probably can't touch or understand a lot of the code.
We will have to see how well rustls stands up after 30 years of different people hacking on its code base.
Having said that, it is always nice to see someone raising the bar.

[User29]

It's sad that the militant pink-lightblue-white coding sock community is winning because they're openly banning people from asking questions like in the std c++ committee.

what???

[nazar-pc]

BoringSSL is Google's, not Cloudflare's 🤔

[mcepl]

Completely irrelevant. For a security library, what matters is not just a speed, but robustness, quality and experience of its maintainers. There were zillion security libraries (NSS, GnuTLS, BoringSSL, LibreSSL) claiming to be better, faster, overall more awesome, but in the end they win only their small corner case, if that. I haven’t got many requests about porting M2Crypto to LibreSSL lately. Is it at all relevant outside of OpenBSD world?