50 ms·
None of that makes sense. What does getting a certificate through let's encrypt have to do with the server getting overwhelemed? It's a thing that happens onc
by ehutch79 2y ago
None of that makes sense.
What does getting a certificate through let's encrypt have to do with the server getting overwhelemed?
It's a thing that happens once to renew a cert every couple months.
The performance hit of https on a modern server is negligable. The performance hit on a watch is negligable.
- sumtechguy 2y agoIt is not the overhead of the TLS bit but the chain of trust. Putting a caching proxy in the middle of the system is breaking that trust chain. You can do proxy with TLS but it is tricky to do to maintain that chain of trust. A proxy would be a classic way to mitigate (not eliminate) that sort of issue. Either on the serving side or client side. Basically lower the data being returned but not the calls from the clients themselves (this is a DDoS issue). TLS just makes it harder to do proxy.
- ehutch79 2y agoI still have no idea what you're talking about. Cloudflare is either passing traffic through without touching it, or as a proxy is doing tls termination, as they're a trusted CA in most devices/browsers/OSs/etc. None of this really has anything to do with that's happening with OP.