-
Notifications
You must be signed in to change notification settings - Fork 5.3k
Description
We are running our workloads on AWS ECS Fargate linux containers.
After migrating to .net 8 we have experienced very high cpu usage and slow responses.
We use AmazonCloudfrontUrlSigner
This library uses System.Security.Cryptography that calls native openssl libraries.
In dotnet 7 base images there was libssl1.1 used. But .net 8 uses libssl3
There are big performance issues with openssl3.0
openssl/openssl#15199
openssl/openssl#17064
This makes impossible to use .net 8 base images with heavy load. In our case bottleneck seems to be going via this method call.
Is there any solution to this? Perhaps it would be possible to switch to openssl1.1 before the issues are fixed on openssl?
Here is what we capture from dotTrace using .net 8

Running same performance test on same instance same code using .net 7
