Welcome! Log In Create A New Profile

Advanced

Encrypted Passwords Documentation Patch

Posted by Daniel Schneller 
Daniel Schneller
Encrypted Passwords Documentation Patch
November 06, 2017 05:10PM
Hi!

Attached find a documentation patch for the encrypted passwords in userlists.

It adds a warning about the potentially significant CPU cost the modern
algorithms with their thousands of hashing rounds can incur. In our case it
made the difference between haproxy’s CPU usage being hardly noticeable at all
to it almost eating a full core, even for a not very busy site.

Tested with 1.6, but this applies to all versions, if I am not mistaken.

Cheers,
Daniel


--
Daniel Schneller
Principal Cloud Engineer

CenterDevice GmbH | Hochstraße 11
| 42697 Solingen
tel: +49 1754155711 | Deutschland
daniel.schneller@centerdevice.de | www.centerdevice.de

Geschäftsführung: Dr. Patrick Peschlow, Dr. Lukas Pustina,
Michael Rosbach, Handelsregister-Nr.: HRB 18655,
HR-Gericht: Bonn, USt-IdNr.: DE-815299431
Attachments:
open | download - 0001-DOC-Add-note-about-encrypted-password-CPU-usage.patch (2.3 KB)
Willy Tarreau
Re: Encrypted Passwords Documentation Patch
November 06, 2017 06:50PM
On Mon, Nov 06, 2017 at 05:06:37PM +0100, Daniel Schneller wrote:
> It adds a warning about the potentially significant CPU cost the modern
> algorithms with their thousands of hashing rounds can incur. In our case it
> made the difference between haproxy's CPU usage being hardly noticeable at all
> to it almost eating a full core, even for a not very busy site.

Good point! Now applied, thanks Daniel.

Willy
Sorry, only registered users may post in this forum.

Click here to login