Hi all,
Our upload speed is only 128kb and we have a webserver that has SSL enabled,
we are not using a 3rd party CA.
Everytime we access the website via SSL from the Internet, it took about 10
seconds or longer before it opens. And it seems like there's a lot of
packets going on. It opens up fast if we access the website from our LAN.
So it must have something to do with our upload speed.
Does anybody knows how much size MB does SSL processes before it finishes
the handshake?
Are there some kind of tweaks on how to fine tune this?
Thanks,
Al

Report this post to a moderator

On Fri, 25 Jul 2003 14:43:31 +0000, al wrote:

> Are there some kind of tweaks on how to fine tune this?


Format the system and install FreeBSD or Linux and set it up with Apache.

Report this post to a moderator

I totally agree with you my man but this is for Metaframe Web Interface
running on IIS (It Isn't Secure).
I just find that M$ SSL is slower.............I want to know if there are
any kind of tweaks available.
thanks,
Al



"Freeride" <freeride@maillinux.org> wrote in message
newsan.2003.07.26.00.02.44.402342@maillinux.org...
> On Fri, 25 Jul 2003 14:43:31 +0000, al wrote:
>
> > Are there some kind of tweaks on how to fine tune this?
>
>
> Format the system and install FreeBSD or Linux and set it up with Apache.

Report this post to a moderator

Al,

No, not upload speed. I had personally banged my head into this problem
more than a year ago, and it has nothing to do with network speed or
anything like that. SSL handshake is done in a few seconds, tops.
(Transmission of certificates takes place very quickly.)

What happens is that Internet Explorer (client-side) issues DNS requests and
then just sits and waits. In my case it sat around for 15 to even 20
seconds before it completes the initialization. Another guy on this NG
(can't remember his name now, but a nice guy to work with) confirmed my
observation by sniffing the packets. Neither of us know exactly why the
client just sits and waits, but this problem is resolved when you issue SSL
requests on the LAN side. My guess is that it has something to do with
reverse DNS lookup, but between the two of us we are stumped as well.

Let us know if you find anything more.

SC


"al" <allen@somplace.com> wrote in message
news:nmbUa.118$4I5.26308766@newssvr21.news.prodigy.com...
> Hi all,
> Our upload speed is only 128kb and we have a webserver that has SSL
enabled,
> we are not using a 3rd party CA.
> Everytime we access the website via SSL from the Internet, it took about
10
> seconds or longer before it opens. And it seems like there's a lot of
> packets going on. It opens up fast if we access the website from our LAN.
> So it must have something to do with our upload speed.
> Does anybody knows how much size MB does SSL processes before it finishes
> the handshake?
> Are there some kind of tweaks on how to fine tune this?
> Thanks,
> Al
>
>

Report this post to a moderator

On Sat, 26 Jul 2003 08:15:08 +0000, al wrote:

> I totally agree with you my man but this is for Metaframe Web Interface
> running on IIS (It Isn't Secure).
> I just find that M$ SSL is slower.............I want to know if there are
> any kind of tweaks available.
> thanks,
> Al
>
Metaframe's NFuse works with Apache/Tomcat on Linux/Unix.

Report this post to a moderator

I am aware of that but that might not be enough reason to dump IIS and move
to Apache.
We would like to see if there are some tweaks we can do first.


"Freeride" <freeride@maillinux.org> wrote in message
newsan.2003.07.27.00.18.25.357651@maillinux.org...
> On Sat, 26 Jul 2003 08:15:08 +0000, al wrote:
>
> > I totally agree with you my man but this is for Metaframe Web Interface
> > running on IIS (It Isn't Secure).
> > I just find that M$ SSL is slower.............I want to know if there
are
> > any kind of tweaks available.
> > thanks,
> > Al
> >
> Metaframe's NFuse works with Apache/Tomcat on Linux/Unix.

Report this post to a moderator

I sniffed an ssl connection and iexplorer. try to connect to the certificate
authority to validate the certificate. If it is not reachable (I had this
problem) it takes a lot more than 30 seconds, and after appears the grey
screen asking to acept or reject the certificate.

Regards,
Claudio.

"al" <allen@somplace.com> wrote in message
news:nmbUa.118$4I5.26308766@newssvr21.news.prodigy.com...
> Hi all,
> Our upload speed is only 128kb and we have a webserver that has SSL
enabled,
> we are not using a 3rd party CA.
> Everytime we access the website via SSL from the Internet, it took about
10
> seconds or longer before it opens. And it seems like there's a lot of
> packets going on. It opens up fast if we access the website from our LAN.
> So it must have something to do with our upload speed.
> Does anybody knows how much size MB does SSL processes before it finishes
> the handshake?
> Are there some kind of tweaks on how to fine tune this?
> Thanks,
> Al
>
>

Report this post to a moderator