3 ms·
One big overheard in SSL can be zlib compression buffers. Setting ssl_op_no_compression can help quite a bit.
by shanemhansen 11y ago
One big overheard in SSL can be zlib compression buffers. Setting ssl_op_no_compression can help quite a bit.
- skuhn 11y agoThat's true, and you shouldn't support TLS compression anyway (to resolve attacks like CRIME). You should also set SSL_MODE_RELEASE_BUFFERS to reclaim memory from idle SSL connections.