search

h5bp / server-configs

Boilerplate configurations for various web servers.
3.1k stars 412 forks source link

[nginx] Increase SSL performance. #130

Closed aitte closed 11 years ago

aitte commented 11 years ago 
# Optimize SSL by caching session parameters for 10 minutes. This cuts down on the number of expensive SSL handshakes.
# The handshake is the most CPU-intensive operation, and by default it is re-negotiated on every new/parallel connection.
# By enabling a cache (of type "shared between all Nginx workers"), we tell the client to re-use the already negotiated state.
# Further optimization can be achieved by raising keepalive_timeout, but that shouldn't be done unless you serve primarily HTTPS.
ssl_session_cache    shared:SSL:10m; # a 1mb cache can hold about 4000 sessions, so we can hold 40000 sessions
ssl_session_timeout  10m;
aitte commented 11 years ago

This and many other issues were fixed in the latest pull request.