mongodb SSL encryption with application makes slow.

Prabhin MP
Prabhin MP used Ask the Experts™
on
mongodb SSL encryption with application makes slow.
Can somebody help on this
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
David FavorFractional CTO
Distinguished Expert 2018

Commented:
Correctly configured SSL has very little performance effect on well tooled sites.

1) Describe your App code calling Mongo.

2) If there's a public URL which can be tested post the URL.

3) If there's a public IP + port to test your Mongo instance, post this also.

Note: Well tooled, means good caching layer on top of Mongo, similar to how WordPress caching plugins work or normal Apache caching works.
Prabhin MPDevOps Engineer
Distinguished Expert 2018

Author

Commented:
I cannot provide the access since the application is used internally.
It's is an java application which is configured with self signed certificate using openssl.
Application is too slow when we use this.
My question is Is this happening  due to self signed certificate?? Or should I use valid certificate from any provider?,
David FavorFractional CTO
Distinguished Expert 2018

Commented:
If App is used internally, then just remove SSL from Mongo + ACL your Mongo instance with iptables.

Note: ACL, meaning... only certain IPs can connect to your Mongo instance, so no SSL is required.

Java tends to be slow itself. If the Java SSL binding being used is written in Java (shudder) rather than being a thin calling layer to the OpenSSL libraries, the SSL binding in use may actually be the problem.

Certificate signing should have no speed effect... well... number of bits for key will make a slight difference, although I use 4096 bit keys on all sites I manage, so more likely the binding you're using is pure Java, rather than calling OpenSSL libraries.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Prabhin MPDevOps Engineer
Distinguished Expert 2018

Author

Commented:
@david,
I understood what you are saying, as per the security team comments we have to  setup ssl between app and mongodb.  It would be great If somebody  suggest to increase speed of applications to 50% using  SSL.
David FavorFractional CTO
Distinguished Expert 2018

Commented:
You'll likely have to hire someone to debug this, as debugging will require access to your internal infrastructure to do problem determination + fixing.
Prabhin MPDevOps Engineer
Distinguished Expert 2018

Author

Commented:
there is no infrastructure issue.  without ssl it works fast

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial