> On Apr 26, 2017, at Apr 26, 2:13 AM, jaseywang <jaseyw...@gmail.com> wrote: > > Hi > @Willy @Cyril do you have any recommended config for ssl related setting, we > now use nbproc and cpu-map to distribute the load to each cpu, though haproxy > can work with cdn now, it's performance is not as good as before without cdn, > user time of each core is almost saturated. > Thanks.
I think that most would recommend using a TLS config from https://wiki.mozilla.org/Security/Server_Side_TLS <https://wiki.mozilla.org/Security/Server_Side_TLS> unless you have specific needs and expert knowledge to make up your own. -Bryan
