[PATCH] Revert "build: switch VERSION_REPO to HTTPS"

[Baptiste Jonglez]

Hi,

On 25-11-20, Petr Štetiar wrote:
> Paul Spooren <mail at aparcar.org> [2020-11-24 22:29:00]:
> 
> Hi,
> 
> > Using HTTPS for opkg dramatically slows down download of packages and reload
> > of indexes.
> 
> do you've such dramatic numbers handy?

For the imagebuilder, it increases the *total* build time (not just
download time!) by +50%:

http://lists.openwrt.org/pipermail/openwrt-devel/2020-September/031406.html

On a device, I suspect it will be much worse but I can't currently test
that.  It shouldn't be too hard, just make sure to clean opkg files
between each test to have a proper apple-to-apple comparison.

The main problem is the lack of persistent connection, which means doing a full
expensive TLS exchange for each separate file download, however small it is.
It's a lot of crypto for a small CPU on devices, and if it's widely
deployed it will also impact the load on the download server.

Thus, it's not reasonable to have this by default in a release.

I'm working on adding persistent connection support to opkg but it's not
straightforward.

Baptiste
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20201125/b82e177a/attachment.sig>