On 6/20/2021 1:52 AM, Lukas Tribus wrote:
Can you try disabling threading, by putting nbthread 1 in your config?
That didn't help. From testssl.sh:
SSL Session ID support yes
Session Resumption Tickets: yes, ID: no
An upgrade to 2.4.1 would also be advisable, it actually fixes a
locking issue with SSL session cache (not sure whether that could
really be the root cause though).
This actually is already running 2.4.1. I accidentally killed my
basement server (with version 2.4.0), so until I can acquire what I need
to fix it, I'm fiddling with the server I have in AWS. That server
hosts my email and my "professional" web page. And I moved a small
portion of my "main" website (which normally runs in my basement) to it
as well. Today I upgraded haproxy from 1.8 to 2.4.1.
-----------------
Unrelated, and off topic because it's mostly about Apache, but strange:
I've been doing some tests with webpagetest.org, and seeing REALLY long
load times for some resources in their waterfall graph. I see no speed
problems when I load the pages from my workstation at home.
Wondering if maybe webpagetest.org and AWS have trouble getting
connected to each other. The haproxy logs seem to be telling me that
the delay is in the backend connection, not the frontend. I've been
fiddling with the Apache config... the backend connection is now http/2
and I've switched to the Event MPM. None of that has helped what
webpagetest sees, though it did make a big difference in how quickly the
page loads for me.
Here's a portion of the haproxy log for one of the slow connections
reported by webpagetest.org:
1/0/0/38833/59785 200 1074085
The image is a little over a megabyte, and it looks like it took nearly
39 seconds for Apache to get the HTTP headers in the response back to
haproxy, then another 20 seconds to actually transfer the file, which
matches what the waterfall graph says. That's absolutely nuts. If I
load the same page from home, it takes a second or two for the whole
page - with a lot of images that are larger than a megabyte. HTTP/2
makes them all load at the same time.
As I said above, that's not really super-relevant for this list. But if
anyone has any wisdom to share, I'd love to hear it, even if it's off-list.
Thanks,
Shawn
