Skip to content

Massive performance downgrade when using latest .NET 8 linux runtime image caused by libssl3 #97727

@adomass

Description

@adomass

We are running our workloads on AWS ECS Fargate linux containers.
After migrating to .net 8 we have experienced very high cpu usage and slow responses.

We use AmazonCloudfrontUrlSigner
This library uses System.Security.Cryptography that calls native openssl libraries.
In dotnet 7 base images there was libssl1.1 used. But .net 8 uses libssl3

There are big performance issues with openssl3.0
openssl/openssl#15199
openssl/openssl#17064

This makes impossible to use .net 8 base images with heavy load. In our case bottleneck seems to be going via this method call.
Is there any solution to this? Perhaps it would be possible to switch to openssl1.1 before the issues are fixed on openssl?

Here is what we capture from dotTrace using .net 8
image

Running same performance test on same instance same code using .net 7
image

Metadata

Metadata

Assignees

Labels

area-System.Securityin-prThere is an active PR which will close this issue when it is mergedtenet-performancePerformance related issue

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions