https / ssl performance, 1.8

Long time user, first time poster.

We've used server version 1.6 with svnserve on an existing project and it works great. (All teams members are inside firewall)

We have a new project with outside collaborations and some not open source code, so we set up https:// Mod Dav using apache2 and pwauth for validation -- we have other resources and prefer using the same authentication for all for simplicity.

It "works" but the performance makes it nearly unusable. Monitoring the server using the top linux utility indicates many, many invocations of "pwauth" for a single client request. The next thing I was going to try was to install an sssd daemon on the server, but I wanted to ask if there was anything else I was missing.

Below are various version numbers / httpd config directives I think will be relevant. The host is actually a virtual machine hosted on a fairly high VMSphere server; the 1.6 svnserve subversion server that works well is on the same server so it seems unlikely that that would be the problem. (And other IPC mechanisms like secure copy (scp) show very good performance.)

CentOS release 6.7 (Final)

uname -a
Linux hostname 2.6.32-573.3.1.el6.x86_64 #1 SMP Thu Aug 13 22:55:16 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

sudo httpd -version
Server version: Apache/2.2.15 (Unix)
Server built: Aug 24 2015 17:52:49
===
<VirtualHost *:80>
    DocumentRoot /web
    CustomLog /var/log/httpd/hostname-access.log combined
    Redirect 301 "/repos" "https://hostname/repos"<https://hostname/repos>
    Redirect 301 "/wiki" "https://hostname/wiki"<https://hostname/wiki>
    Redirect 301 "/developer" "https://hostname/developer"<https://hostname/developer>

===
LoadModule authnz_external_module modules/mod_authnz_external.so

DefineExternalAuth pwauth pipe /usr/bin/pwauth

<LocationMatch "/(mediawiki|repos|developer)/">

    # Require SSL connection for password protection.
    SSLRequireSSL

    AuthType Basic
    AuthName "realm name"
    AuthBasicProvider external
    AuthExternal pwauth
    require valid-user

</LocationMatch>

===
LoadModule dav_svn_module modules/mod_dav_svn.so
LoadModule authz_svn_module modules/mod_authz_svn.so

<Location /repos>
   DAV svn
   SVNParentPath "/svn/"
   SVNAllowBulkUpdates Prefer
</Location>
CustomLog logs/svn_logfile "%t %u %{SVN-ACTION}e" env=SVN-ACTION

--
Gerard Weatherby | Application Architect
Virtual Cell | Center for Cell Analysis & Modeling | UConn Health
NMRbox | Department of Molecular Biology and Biophysics | UConn Health
263 Farmington Avenue, Farmington, CT 06030-6406 uchc.ed