Cool :) As ballpark figures for SSL session cache timeouts, Apache defaults to 5 minutes, F5 load balancers default to 1 hour and JBoss is 1 day. So it really

Cool :) As ballpark figures for SSL session cache timeouts, Apache defaults to 5 minutes, F5 load balancers default to 1 hour and JBoss is 1 day. So it really seems like a wide range of values get used out in the world. Upping to an hour should cause no problems. With SHM cache that will use a bit more memory, should make no practical difference for DBM. The other thing to watch out for (mentioned at link) is that lots of cheap SSL certs have a cert chain like 4 or 5 items long, bloating startup. See, e.g: https://www.ssllabs.com/ssltest/analyze.html?d=zxc.mx&hideResults=on https://www.ssllabs.com/ssltest/analyze.html?d=zxc.mx&hi... That shows that 5983 bytes of intermediate certs are being sent over and above the actual server cert. That's going to eat a bunch of RTTs during SSL setup.