SSL improve speed

JelleG · Dec 27, 2016

Hi,

I installed a SSL Comodo certificate on my DA 1.501 VPS, using the default DA SSL method for a website.

When I run a speed test for my website, using tools.pingdom.com I have a quite long SSL and Connect time.
Also for pages that only load images of a few KB.

It uses 225ms to performing a SSL handshake and the same 225ms for connecting to the server.

Is there a way to improve the speed of the SSL connection?

Hosting Kernel · Dec 27, 2016

you can try enable http2.

JelleG · Dec 27, 2016

Hosting Kernel said:
you can try enable http2.

Thanks! Therefore the following tutorial should be good? http://forum.directadmin.com/showthread.php?t=52590

Hosting Kernel · Dec 27, 2016

Yes, that's exactly what you are looking for

JelleG · Dec 27, 2016

Hosting Kernel said:
Yes, that's exactly what you are looking for

Thanks a lot! I just enabled http2, but that sadly did not descrease the time a lot. It decreases for max 10 ms. Is there another solution?

zEitEr · Dec 28, 2016

Yes, SSL hadshake/verification takes time. You might need to review a list of used SSL/TLS certs and enable OCSP stapling https://en.wikipedia.org/wiki/OCSP_stapling in order to reduce time.

JelleG · Dec 28, 2016

zEitEr said:
Yes, SSL hadshake/verification takes time. You might need to review a list of used SSL/TLS certs and enable OCSP stapling https://en.wikipedia.org/wiki/OCSP_stapling in order to reduce time.

Thanks a lot! How can I enable SSL OCSP for my DA Apache server? Can you tell me what files I need to edit and how?

Edit: Is HTTP/2 required for OCSP Stapling?

SSL improve speed

JelleG

Verified User

Hosting Kernel

Verified User

JelleG

Verified User

Hosting Kernel

Verified User

JelleG

Verified User

zEitEr

Super Moderator

JelleG

Verified User