Current time: 09-17-2019, 01:03 AM Hello There, Guest! (LoginRegister)

Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Slow SSL in Chrome [Solved]
12-23-2015, 03:02 AM (This post was last modified: 12-29-2015 04:20 AM by rew-steven.)
Post: #1
Slow SSL in Chrome [Solved]
Chrome http://www.webpagetest.org/result/151221_GM_10X7/ 500-5000ms
Firefox http://www.webpagetest.org/result/151222_CZ_38F/ >100ms

Why is this so slow and how can I fix it?
Find all posts by this user
Quote this message in a reply
12-24-2015, 01:08 AM
Post: #2
RE: Slow SSL in Chrome
Looks like you have serious server performance issues. It's only affecting your domain and it shows up in the SSL negotiation as well at TTFB. It could be serious networking issues or problems with the server itself. You need to ping your hosting company to have them take a look.
Visit this user's website Find all posts by this user
Quote this message in a reply
12-24-2015, 03:13 AM
Post: #3
RE: Slow SSL in Chrome
I am the host company Smile

Server load is very low, other servers with the same config have no issues. And the issue only shows up in Chrome tests.

Works fine on my desktop as well. I suspect it might be related to the huge CRL provided by the cert, but afaik Chrome doesn't use CRLs.

http://crl.godaddy.com/gdig2s1-87.crl is over 6M
Find all posts by this user
Quote this message in a reply
12-27-2015, 04:14 AM
Post: #4
RE: Slow SSL in Chrome
It shows up in your Firefox tests as well:

http://www.webpagetest.org/result/151222...ls/cached/

http://www.webpagetest.org/result/151222...2/details/

There are also some long TTFB cases which is what led me to think it is more of a server issue: http://www.webpagetest.org/result/151222...ls/cached/

If you grab a tcpdump with the test it should give you a bit more visibility into whatever is going on but if it is server side you will just see big gaps.
Visit this user's website Find all posts by this user
Quote this message in a reply
12-29-2015, 04:19 AM
Post: #5
RE: Slow SSL in Chrome
Thanks for the help. tcpdump showed a long stall between Client Hello and Server Hello, indicating it was a server issue.

I then checked /server-status and saw all the workers were full. I had changed

Code:
ServerLimit           24
MaxClients            192

but only did a reload, not a full restart, so the change hadn't taken effect. Doing a restart of apache got me the extra workers I needed, and my speeds are no longer having long hangs at the SSL stage.
Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 2 Guest(s)