ssl и keepalive

[mab]

Приветсвую.
Есть проект  на котором часть элементов вынесли через сабдомен на https и
столкнулись с тем что количество waiting коннектов выросло примерно в 5 раз
хотя keepalive_timeout прописан глобально в 5 секунд
ssl игнорирует keepalive_timeout?


nginx version: nginx/1.8.0
built with OpenSSL 1.0.2c 12 Jun 2015
TLS SNI support enabled
configure arguments: --prefix=/usr/local/etc/nginx --with-cc-opt='-I
/usr/local/include' --with-ld-opt='-L /usr/local/lib'
--conf-path=/usr/local/etc/nginx/nginx.conf
--sbin-path=/usr/local/sbin/nginx --pid-path=/var/run/nginx.pid
--error-log-path=/var/log/nginx-error.log --user=www --group=www --with-ipv6
--http-client-body-temp-path=/var/tmp/nginx/client_body_temp
--http-fastcgi-temp-path=/var/tmp/nginx/fastcgi_temp
--http-proxy-temp-path=/var/tmp/nginx/proxy_temp
--http-scgi-temp-path=/var/tmp/nginx/scgi_temp
--http-uwsgi-temp-path=/var/tmp/nginx/uwsgi_temp
--http-log-path=/var/log/nginx-access.log --with-http_geoip_module
--with-http_gunzip_module --with-http_realip_module
--with-http_stub_status_module --with-pcre --with-http_spdy_module
--with-http_ssl_module

OS: 9.2-RELEASE-p2
Настройки ssl:

server {
  listen x.x.x.x:443 default rcvbuf=32768 sndbuf=131072
accept_filter=dataready ssl spdy;
  server_name example.com;
  root /path/to/project;
  ssl on;
  ssl_protocols       TLSv1 TLSv1.1 TLSv1.2 SSLv3;
  ssl_ciphers
'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4';
  ssl_certificate_key   /root/.ssh/beeg.com.2015.private.key;
  ssl_certificate       /root/.ssh/beeg.com.2015.crt;
  ssl_session_cache   shared:SSL:10m;
  ssl_prefer_server_ciphers on;
  ssl_session_timeout 20m;
.... дальше ничего необычного(фпм/статика/реврайты)
}

Posted at Nginx Forum: https://forum.nginx.org/read.php?21,263914,263914#msg-263914