Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are currently checking the performance of our production sites (Windows 2003). They are serving a lot of HTTPS traffic, which we can't currently swap over to HTTP. I was wondering what were the best performance counters to investigate to see if our servers are being bogged down by the SSL connections?

share|improve this question
add comment

2 Answers 2

up vote 0 down vote accepted

Assuming you've already monitored your Internet connection to make sure it isn't saturated (that isn't SSL specific of course) the main impact of SSL is likely to be CPU, so use performance monitor to check the CPU over some suitable period. You may also want to monitor the process counter to check CPU usage for the inetinfo and w3wp processes.

I don't know of a way to drill down further, e.g. to see that it's SSL causing the high CPU as opposed to a rogue ASP script. I suppose you could run all SSL traffic in a separate application pool and just monitor CPU for the appropriate w3wp process.

JR

share|improve this answer
    
Is it right to assume then if there is not a lot of CPU load that the SSL is not a bottleneck? I was under the impression that there was a queue of SSL connections and that if that was overloaded that it may show a low CPU, but a long wait for new SSL connections. –  Andrew Cox Jul 6 '09 at 19:43
    
Servicing SSL requests is computationally much more expensive than servicing HTTP requests because the server has to do the encryption and decryption. So if SSL processing is the bottleneck you'd expect to see high CPU. If bandwidth is the bottleneck then you'd expect to see a big queue of SSL (and HTTP) connections and low CPU. –  John Rennie Jul 7 '09 at 9:00
add comment

If you want to use Windows performance counters the WWW service performance counter can give you a lot of useful information about a site or sites running in IIS (both http and https). You can find details of what you can log here.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.