nginx ssl is very slow. need help to optimize configuration

Does Mathematica reuse previous computations?

Time travel from stationary position?

Examples of the Pigeonhole Principle

Could the Saturn V actually have launched astronauts around Venus?

Can a druid choose the size of its wild shape beast?

What's the meaning of “spike” in the context of “adrenaline spike”?

Gantt Chart like rectangles with log scale

Do these spellcasting foci from Xanathar's Guide to Everything have to be held in a hand?

A sequence that has integer values for prime indexes only:

A link redirect to http instead of https: how critical is it?

Co-worker team leader wants to inject his friend's awful software into our development. What should I say to our common boss?

Is it possible to upcast ritual spells?

how to write formula in word in latex

Happy pi day, everyone!

Python if-else code style for reduced code for rounding floats

Welcoming 2019 Pi day: How to draw the letter π?

Sailing the cryptic seas

Are all passive ability checks floors for active ability checks?

Unexpected result from ArcLength

What are substitutions for coconut in curry?

Why one should not leave fingerprints on bulbs and plugs?

The difference between「N分で」and「後N分で」

Have researchers managed to "reverse time"? If so, what does that mean for physics?

Why did it take so long to abandon sail after steamships were demonstrated?



nginx ssl is very slow. need help to optimize configuration














0















My nginx is very slow when serving SSL. I've tried to optimize my configuration but could not resolve my problems.



Here's my current config:



ssl_session_cache shared:SSL:100m;
ssl_protocols TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
ssl_ecdh_curve secp384r1;
ssl_session_tickets off;
ssl_stapling on;
ssl_stapling_verify on;
#add_header Strict-Transport-Security "max-age=86400; includeSubDomains; preload";
#add_header X-Frame-Options DENY;
#add_header X-Content-Type-Options nosniff;


Could some please help me by identify what is causing the SSL handshake to be so slow, and how to resolve it?









share



























    0















    My nginx is very slow when serving SSL. I've tried to optimize my configuration but could not resolve my problems.



    Here's my current config:



    ssl_session_cache shared:SSL:100m;
    ssl_protocols TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_ecdh_curve secp384r1;
    ssl_session_tickets off;
    ssl_stapling on;
    ssl_stapling_verify on;
    #add_header Strict-Transport-Security "max-age=86400; includeSubDomains; preload";
    #add_header X-Frame-Options DENY;
    #add_header X-Content-Type-Options nosniff;


    Could some please help me by identify what is causing the SSL handshake to be so slow, and how to resolve it?









    share

























      0












      0








      0








      My nginx is very slow when serving SSL. I've tried to optimize my configuration but could not resolve my problems.



      Here's my current config:



      ssl_session_cache shared:SSL:100m;
      ssl_protocols TLSv1.2;
      ssl_prefer_server_ciphers on;
      ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
      ssl_ecdh_curve secp384r1;
      ssl_session_tickets off;
      ssl_stapling on;
      ssl_stapling_verify on;
      #add_header Strict-Transport-Security "max-age=86400; includeSubDomains; preload";
      #add_header X-Frame-Options DENY;
      #add_header X-Content-Type-Options nosniff;


      Could some please help me by identify what is causing the SSL handshake to be so slow, and how to resolve it?









      share














      My nginx is very slow when serving SSL. I've tried to optimize my configuration but could not resolve my problems.



      Here's my current config:



      ssl_session_cache shared:SSL:100m;
      ssl_protocols TLSv1.2;
      ssl_prefer_server_ciphers on;
      ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
      ssl_ecdh_curve secp384r1;
      ssl_session_tickets off;
      ssl_stapling on;
      ssl_stapling_verify on;
      #add_header Strict-Transport-Security "max-age=86400; includeSubDomains; preload";
      #add_header X-Frame-Options DENY;
      #add_header X-Content-Type-Options nosniff;


      Could some please help me by identify what is causing the SSL handshake to be so slow, and how to resolve it?







      nginx ssl performance web-server https





      share












      share










      share



      share










      asked 57 secs ago









      ikevin8meikevin8me

      1165




      1165






















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "2"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f958549%2fnginx-ssl-is-very-slow-need-help-to-optimize-configuration%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Server Fault!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f958549%2fnginx-ssl-is-very-slow-need-help-to-optimize-configuration%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

          Список ссавців Італії Природоохоронні статуси | Список |...

          Українські прізвища Зміст Історичні відомості |...