]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
MINOR: ssl: disable TCP quick-ack by default on SSL listeners
authorWilly Tarreau <w@1wt.eu>
Mon, 3 Sep 2012 20:33:40 +0000 (22:33 +0200)
committerWilly Tarreau <w@1wt.eu>
Mon, 3 Sep 2012 20:36:27 +0000 (22:36 +0200)
Since the SSL handshake involves an immediate reply from the server
to the client, there's no point responding with a quick-ack before
sending the data, so disable quick-ack by default, just as it is done
for HTTP.

This shows a 2-2.5% transaction rate increase on a dual-core atom.

src/cfgparse.c

index 82c741ae5bfc9977838b678839d1ebe517abaf68..0cd9c27242b5c97161fe2559bc3e680b1bba224d 100644 (file)
@@ -6740,7 +6740,7 @@ out_uri_auth_compat:
 
                        /* smart accept mode is automatic in HTTP mode */
                        if ((curproxy->options2 & PR_O2_SMARTACC) ||
-                           (curproxy->mode == PR_MODE_HTTP &&
+                           ((curproxy->mode == PR_MODE_HTTP || listener->ssl_cert) &&
                             !(curproxy->no_options2 & PR_O2_SMARTACC)))
                                listener->options |= LI_O_NOQUICKACK;