Trying to increase performence for a site w/ SSL

Trying to increase performence for a site w/ SSL

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Trying to increase performence for a site w/ SSL tgh003 01-05-2007
Posted by on January 5, 2007, 12:09 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I have a web application that makes pretty heavy use of Javascript,
couple of style sheets, and several other image assets. Probably a
total of ~30 assets per page (images, style sheets, and script files).
I use a wildcard certificate so *.mycompany.com.

I understand that spreading these assets over several subdomains can
significantly reduce the client side load time. (this is because
pipelining isnt turned on the major browsers so the maximum number of
assets the browser can download simultaneously is 2, so if you spread
the load amongst several domains you can download more assets
simultaneously).

Does this benefit still hold true if you are on a SSL connection? If I
spread the assets across say 4 subdomains (subdomain1.mycompany.com,
subdomain2.mycompany.com, etc...) does each of these connections need
to perform a new SSL handshake for every page thus negating the
benefit? Or is the first request just going to be slower because it
does indeed need to make 4 separate ssl handshakes but the rest of the
session (all subsequent page loads) is faster? Or is there a way to
handshake on the base url such as https://*.mycompany.com thus making
all subsequent requests faster?

Basically I am trying to make all the pages load faster. Any thoughts
are appreciated.


Posted by Ertugrul Soeylemez on January 5, 2007, 12:46 am
If you were  Registered and logged in, you could reply and use other advanced thread options
tgh003@gmail.com (07-01-04 21:09:29):

> I understand that spreading these assets over several subdomains can
> significantly reduce the client side load time. (this is because
> pipelining isnt turned on the major browsers so the maximum number of
> assets the browser can download simultaneously is 2, so if you spread
> the load amongst several domains you can download more assets
> simultaneously).

Making pages load faster means not to work around problems, but to solve
them. Use less images, SSI (see below), etc.


> Does this benefit still hold true if you are on a SSL connection? If
> I spread the assets across say 4 subdomains (subdomain1.mycompany.com,
> subdomain2.mycompany.com, etc...) does each of these connections need
> to perform a new SSL handshake for every page thus negating the
> benefit? Or is the first request just going to be slower because it
> does indeed need to make 4 separate ssl handshakes but the rest of the
> session (all subsequent page loads) is faster? Or is there a way to
> handshake on the base url such as https://*.mycompany.com thus making
> all subsequent requests faster?

No. For each connection, a separate SSL handshake is required.


> Basically I am trying to make all the pages load faster. Any thoughts
> are appreciated.

You might try to use SSI (Server-Side Includes) [1,2] to include the
script and style files directly into the main HTML file. As such, the
client would need a lot fewer requests, which reduces both network and
CPU load for both parties.


Regards,
E.S.


References:
[1] http://httpd.apache.org/docs/1.3/howto/ssi.html
[2] http://httpd.apache.org/docs/2.0/howto/ssi.html

Similar ThreadsPosted
How to Configure Site-to-Site VPN in Cisco Routers May 2, 2007, 5:31 am
SSRT4699 HP-UX SAM local privilege increase December 24, 2004, 12:47 pm
SSRT4699 rev.2 HP-UX SAM local privilege increase February 3, 2005, 4:55 pm
SSRT4699 rev.1 HP-UX SAM local privilege increase January 14, 2005, 12:50 pm
HPSBUX02174 SSRT061239 rev.2 HP-UX Running OpenSSL Denial of Service (DoS), Increase Privilege December 20, 2006, 6:42 pm
HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System (PFS), Remote Increase in Privilege April 17, 2007, 2:56 pm
Rediirect Site May 4, 2005, 2:50 am
Best Job Search Site... February 7, 2006, 12:13 am
IA Site Updated February 26, 2006, 1:16 am
Cool Ebooks Site July 15, 2006, 2:07 pm

The site map in XML format XML site map

Contact Us | Privacy Policy