4 ms·
Based on the current configuration: No OCSP stapling and no elliptic curve key exchange. Also your setup suffers from TLS version intolerance, which by itself
by hannob 10y ago
Based on the current configuration: No OCSP stapling and no elliptic curve key exchange.
Also your setup suffers from TLS version intolerance, which by itself isn't a performance issue, but it is a hint that you're using a badly written TLS stack.
https://www.ssllabs.com/ssltest/analyze.html?d=junglee.com&s=178.236.6.99&latest https://www.ssllabs.com/ssltest/analyze.html?d=junglee.com&s...
- umanwizard 10y agoAnd how much do those increase first byte latency? (which is the real problem)
- konklone 10y agoTough to say without knowing more about the stack. But in terms of first byte latency, some things you can look at: * TLS False Start * HTTP/2 + ALPN * Optimizing TLS record size Some 2013-era advice for nginx here: https://www.igvita.com/2013/12/16/optimizing-nginx-tls-time-to-first-byte/ https://www.igvita.com/2013/12/16/optimizing-nginx-tls-time-... And some other advice and links here: https://istlsfastyet.com/ https://istlsfastyet.com/
- hannob 10y agoPretty much all of them matter for first byte latency. OCSP & the key exchange both happen before any data can be exchanged.