WebPagetest Forums
Slow SSL in Chrome [Solved] - Printable Version

+- WebPagetest Forums (https://www.webpagetest.org/forums)
+-- Forum: Web Performance (/forumdisplay.php?fid=3)
+--- Forum: Discuss Test Results (/forumdisplay.php?fid=4)
+--- Thread: Slow SSL in Chrome [Solved] (/showthread.php?tid=14124)



Slow SSL in Chrome [Solved] - rew-steven - 12-23-2015 03:02 AM

Chrome http://www.webpagetest.org/result/151221_GM_10X7/ 500-5000ms
Firefox http://www.webpagetest.org/result/151222_CZ_38F/ >100ms

Why is this so slow and how can I fix it?


RE: Slow SSL in Chrome - pmeenan - 12-24-2015 01:08 AM

Looks like you have serious server performance issues. It's only affecting your domain and it shows up in the SSL negotiation as well at TTFB. It could be serious networking issues or problems with the server itself. You need to ping your hosting company to have them take a look.


RE: Slow SSL in Chrome - rew-steven - 12-24-2015 03:13 AM

I am the host company Smile

Server load is very low, other servers with the same config have no issues. And the issue only shows up in Chrome tests.

Works fine on my desktop as well. I suspect it might be related to the huge CRL provided by the cert, but afaik Chrome doesn't use CRLs.

http://crl.godaddy.com/gdig2s1-87.crl is over 6M


RE: Slow SSL in Chrome - pmeenan - 12-27-2015 04:14 AM

It shows up in your Firefox tests as well:

http://www.webpagetest.org/result/151222_CZ_38F/1/details/cached/

http://www.webpagetest.org/result/151222_CZ_38F/2/details/

There are also some long TTFB cases which is what led me to think it is more of a server issue: http://www.webpagetest.org/result/151222_CZ_38F/3/details/cached/

If you grab a tcpdump with the test it should give you a bit more visibility into whatever is going on but if it is server side you will just see big gaps.


RE: Slow SSL in Chrome - rew-steven - 12-29-2015 04:19 AM

Thanks for the help. tcpdump showed a long stall between Client Hello and Server Hello, indicating it was a server issue.

I then checked /server-status and saw all the workers were full. I had changed

Code:
ServerLimit           24
MaxClients            192

but only did a reload, not a full restart, so the change hadn't taken effect. Doing a restart of apache got me the extra workers I needed, and my speeds are no longer having long hangs at the SSL stage.