]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: ssl: handshake optim for long certificate chains.
authorEmeric Brun <ebrun@exceliance.fr>
Tue, 28 Jan 2014 14:43:53 +0000 (15:43 +0100)
committerWilly Tarreau <w@1wt.eu>
Sun, 2 Feb 2014 08:38:06 +0000 (09:38 +0100)
commitd8b2bb5c05e64c65ea3a6c9c69e719d853a667ad
tree45f964e0d498b7a4689a89acb18e6904204a319a
parent95ccdde1f2995a8b69f4285d1a9fb9e4b924793b
MINOR: ssl: handshake optim for long certificate chains.

Suggested on the mailing list by Ilya Grigorik and greatly inspired
from Nginx code: we try to dynamicaly rise the output buffer size from
4k to 16k during the handshake to reduce the number of round trips.
This is mostly beneficial when initcwnd==10.

Ilya's tests confirm the gain and show a handshake time divided by 3 :

before:
   http://www.webpagetest.org/result/140116_VW_3bd95a5cfb7e667498ef13b59639b9bf/2/details/
after:
   http://www.webpagetest.org/result/140201_2X_03511ec63344f442b81c24d2bf39f59d/3/details/
src/ssl_sock.c