SSL Optimizing NGINX TLS Time To First Byte (TTTFB)

Jemekite · Jun 24, 2015

I just read this article: Optimizing NGINX TLS Time To First Byte (TTTFB) - igvita.com
Optimizing the TLS record size
TLS record size can have a significant impacton the page load time performance of your application. In this case, we run into this issue head first: nginx pumps data to the TLS layer, which in turn creates a 16KB record and then passes it to the TCP stack. So far so good, except thatthe server congestion window is less than 16KB for our new connection and we overflow the window, incurring an extra roundtrip while the data is buffered on the client.Fixing this requires making a quick patch to the nginx source:
Code:
diff nginx-1.5.7/src/event/ngx_event_openssl.c nginx-1.5.7-mtu/src/event/ngx_event_openssl.c
570c570
<               (void) BIO_set_write_buffer_size(wbio, NGX_SSL_BUFSIZE);
---
>               (void) BIO_set_write_buffer_size(wbio, 16384);
diff nginx-1.5.7/src/event/ngx_event_openssl.h nginx-1.5.7-mtu/src/event/ngx_event_openssl.h
107c107
< #define NGX_SSL_BUFSIZE  16384
---
> #define NGX_SSL_BUFSIZE  1400
Click to expand...
Is this still relevant on current nginx version?

eva2000 · Jun 24, 2015

not relevant since Nginx 1.5.9+ and higher Nginx HTTPS / SSL Google SPDY configuration as ssl_buffer_size option is supported and if you set it to 1400
Code:
       # nginx 1.5.9+ or higher
        # http://nginx.org/en/docs/http/ngx_http_spdy_module.html#spdy_headers_comp
        # http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_buffer_size
        # spdy_headers_comp 0;
        # ssl_buffer_size 4k;
so you could set the following if you have SPDY SSL enabled and uncomment it removing hash # and restart nginx
Code:
ssl_buffer_size 1400;

eva2000 · Jun 11, 2016

it has arrived Nginx - Optimizing TLS over TCP to reduce latency: TLS dynamic record sizing | Centmin Mod Community

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

SSL Optimizing NGINX TLS Time To First Byte (TTTFB)

Jemekite New Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

SSL Optimizing NGINX TLS Time To First Byte (TTTFB)

Jemekite New Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.