ADCH++ vs LUADCH performance test.

[Derek]

Test was on 800 - 1800 users. Same host, same machine.
Adch++ is a win win - bloom to reduce traffic.
Lower overall CPU usage.
I did end this test slightly earlier that planned thus graph for the LUADCH (right side) is a bit shorter, but you get the point.
Although ADCH++ outperforms LUADCH when it comes to CPU/Bandwith important for large hubs, LUADCH is still a nice soft with settable TLS version, blocking 0 share users and many other options that ADCH++ just doesn't have.
Also i need to mention i tested x64bit ADCH++ vs 32bit win LUADCH.
Short test on LUADCH x64 linux build - showed even more cpu usage vs 32bit somehow thus i'm calling is irrelevant atm.

CPU usage - on the left is adchpp - right side luadch:

cpu.PNG (47.55 KiB) Viewed 36739 times

Bandwith usage - left - ADCHPP right LUADCH:

bandwith.PNG (47.56 KiB) Viewed 36739 times

[Delion]

Running strict TLS 1.3 should be more reliable, not mixed adc\adcs.

I noticed that even old pre-ADC 1.0 clients were able to enter luadch hub. This is not good in any way.

[Derek]

For testing purposes both adc and tls connections were allowed on both hub softs. This would allow for more users. On TLS strict we will lose all old clients. I was hoping we gonna get 3500+ users with fl add- but looks we gonna be topping on 2000 on weekends and 1800 during weekdays.So not too much to stress stest with. I was able to build x64 bit LUADCH on linux. I had a crash within 10 minutes of startup. No error message - just shutdown. Also had adchpp crash once. After running 30 days. Gona stick to adchpp for now.

PS.
I was about to do strict tls 1.3 test today so i was redirecting all traffic to tls address with kp. Somehow i lost 500 users - so i stopped testing. I'm gonna have to figure out wtf happened. I did enter correct addresses and all.

[Delion]

redirecting all traffic to tls address with kp

Oh, please, do not play with those keyprints at all. They dont provide much more security. That's just another way to lose users in case of keyprint change (and it will change one day for sure).

Somehow i lost 500 users

That's totally OK, but you still didnt get the point. The point is: DC is overwhelmed by ancient clients. And those clients like Flylink (and that search flood bug is actually coming from StrongDC++ code) will instantly flood your hub. That's probably why luadch just stopped working.

The only sane way to run ADC(s) hub is a strict TLS 1.3 mode. That's the way to avoid old bugged clients, maintain downloads compatibility, save CPU and make ADC safe and popular.

At least you should try.

[Admin]

Well my cetrs expire every 10 years so do kp. Not a big deal - kp is there for security without them its a piece of cake to bypass tls.

[Delion]

without them its a piece of cake to bypass tls

But then what's the real need in bypassing hub TLS connection with an open non-TLS entrance? :D

[Derek]

Because once you set your client correctly - you gonna block anything non tls on your side - Up And down - no matter what other users have. So if you are connected with kp - noone can break this. Its safe - period. Open non tls port - doesnt matter at all. You cant download/upload from me if your client doesn't encript.So its up to users to setup clients the way they like.

[Delion]

It is all right but still makes no sense if I am a happy StrongDC++ (etc etc etc) user once entered your hub (:

In that case, I'm nothing more than just a bot (no transfers possible) for you, and you are just a bot for me.

IMHO we should avoid that situation.

[Derek]

Correct. But strong can still download and upload fine to users without strict tls setups in clients (majority of Russians atm.). Thus im gonna keep it open for all. Its not a threat to me - or any other client who knows how to setup a secure client. Once people are going to notice that some ISP can sniff into what are they uploading/downloading and cut theirs services off - like they do in USA - maybe they will start to pay attention to details.
Not to mention im paying for a redirect of NMDC users. Why would i pay for something i reject? Talking waste of money hahahah

[Delion]

Hah. Then tell me, what DC client should I use to have access to all your hub users?

Old one? No modern TLS. Newer one? No connects to older ones.

A hub should unite users, not separate.