[Rabbit-dev] Rabbit-dev Digest, Vol 23, Issue 5

[Rick Leir]

See netem:http://www.linuxfoundation.org/collaborate/workgroups/networking/netem

Thanks Samat.

Robo:
I did some performance testing, mostly so I could get some experience
with JMeter. I might have found a bug in JMeter. I made some assumptions
that might invalidate everything. Are the tests useful? Are they fair to
Rabbit4? See them here at BlinkMonitor
<http://blinkmonitor.com/rabbit4-performance/>.
cheers -- Rick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://khelekore.org/pipermail/rabbit-dev/attachments/20120208/4271e5b1/attachment.html>

[Robert Olofsson]

On Wed, 8 Feb 2012 09:24:38 -0500

Post by Rick Leir
I did some performance testing, mostly so I could get some experience
with JMeter. I might have found a bug in JMeter. I made some
assumptions that might invalidate everything. Are the tests useful?

They are probably useful.

Post by Rick Leir
Are they fair to Rabbit4?

Well, rabbit is mostly written to speed up slow links and I do not
think you used any slow links. But please note that rabbit can be used
as a normal web proxy as well, if you turn off the compression, so I
still think the results are valid.

I did see that you got some problems and those problems may be caused
by the bug that I just recently fixed (well, hopefully fixed, still
waiting for some more confirmation). See the thread "bad url request
error":
http://khelekore.org/pipermail/rabbit-dev/2012-February/000294.html

So if you have the time please retest with the latest git version or
wait for the 4.11 release.

Thanks
/robo

[Samat K Jain]

Post by Rick Leir
I did some performance testing, mostly so I could get some experience
with JMeter. I might have found a bug in JMeter. I made some assumptions
that might invalidate everything. Are the tests useful? Are they fair to
Rabbit4? See them here at BlinkMonitor
<http://blinkmonitor.com/rabbit4-performance/>.
cheers -- Rick

From your blog post, I'm not really sure what you're testing?

Since you already have a testbed setup, how about testing RabbIT over an
SSH tunnel?

While not really RabbIT-specific I've always wondered how much slower
tunneling HTTP over SSH is. A lot of people use HTTP proxies over SSH
links these days (public Wi-Fi and all that) and I don't think I've ever
seen a benchmark. SSH tunneling is notorious for being slow.

[Samat K Jain]

Putting this thread back on the list?

Post by Samat K Jain
Since you already have a testbed setup, how about testing RabbIT over
an SSH tunnel?

As it stands, RabbIT passes SSH though with no change. It does not do
any sort of MITM insertion, so it cannot compress the images and html.
Maybe that is a possible future feature, but it raises a few questions
for the user such as 'can I trust the RabbIT site admin?' or 'is this
proxy really a RabbIT proxy or is it the black-hat at the back table'.
If the user checks the cert then she will see a RabbIT cert, and not the
origin server's cert.

I think you're confusing SSH and SSL? I otherwise have no idea what
you're talking about?running RabbIT through SSH does not modify traffic
and requires no support on the part of RabbIT.

Post by Samat K Jain
While not really RabbIT-specific I've always wondered how much slower
tunneling HTTP over SSH is. A lot of people use HTTP proxies over SSH
links these days (public Wi-Fi and all that) and I don't think I've
ever seen a benchmark. SSH tunneling is notorious for being slow.

I would be happy to add a test for SSH tunneling. What are the commands
you would use to set up a tunnel?

If you have RabbIT running on port 9666 at example.com, use:

ssh -L 9666:localhost:9666 example.com

After you connect, configure your Web browser to connect to localhost:9666.

The alternative is having RabbIT available to the Internet on example.com?
which is bad idea (anyone could use your proxy, and if password
protected trivially sniff your username/password for the proxy). I am
sure (or hope) the majority of RabbIT users tunnel over SSH but I'm
unaware of any benchmarks testing how much slower this is (SSH tunnels
are notorious for being slow).

Other than a more complex VPN setup how do other RabbIT users connect to
their RabbIT instances?