Impact of SSL

Hello all,

I administer servers that run a busy web application. The IIS servers
are load balanced, currently Windows 2000 Advanced Server but upgrading
to 2003 very soon.

At the moment, only the login process is always secured. A fully SSL
secured session is an optional extra that the user can choose at logon.

We're looking to move to forcing SSL across the whole application and
removing the possibility of a plain HTTP session.

We need to be sure that we still have the capacity to cope after the
switchover. Does anyone know what kind of performance/capacity impact
this might have on our webservers? I guess it's probably hard to gague
without some kind of stress testing tool - can anyone recommend anything?

Thanks in advance,

--
Chris M.

Remove pants to email me.