Skip to content

Conversation

@DeagleGross
Copy link
Contributor

@DeagleGross DeagleGross commented Oct 16, 2025

TLS benchmarks can be very fragile depending on specific TLS parameters like elliptic curves and cipher suites used by the crypto-driver.

This PR adds:

  1. crank agent dockerfiles setup, which allow configuring openssl differently (using specific ECs and CipherSuites which are FIPS compliant)
  2. readme to explain how to perform network dump collection and how to investigate the serverhello packet; how to setup windows machine as well.

This PR should help perform a test correctly and explains a specific dockerfile changes which affect the TLS behavior on server side

@DeagleGross DeagleGross self-assigned this Oct 16, 2025
@DeagleGross DeagleGross changed the title chores: TLS benchmarks setup Configure openssl.cnf EC, Ciphers for TLS benchmarks Oct 20, 2025
@DeagleGross DeagleGross marked this pull request as ready for review October 20, 2025 17:15
@DeagleGross DeagleGross merged commit f5d8853 into main Oct 20, 2025
2 checks passed
@DeagleGross DeagleGross deleted the dmkorolev/tls branch October 20, 2025 17:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants