[SSL] Initial Connection takes very long time

Richard Stanway r1ch+nginx at teamliquid.net
Mon Dec 9 10:43:40 UTC 2013


This seems like a firewall or router issue, your server isn't even replying
to port 443 connection attempts for a very long time.

04:41:15.000800 IP x.x.x.x.40069 > 118.69.68.219.443: Flags [S], seq
2650257073, win 14600, options [mss 1460,sackOK,TS val 1750622551 ecr
0,nop,wscale 7], length 0
04:41:15.997096 IP x.x.x.x.40069 > 118.69.68.219.443: Flags [S], seq
2650257073, win 14600, options [mss 1460,sackOK,TS val 1750622801 ecr
0,nop,wscale 7], length 0
04:41:18.001097 IP x.x.x.x.40069 > 118.69.68.219.443: Flags [S], seq
2650257073, win 14600, options [mss 1460,sackOK,TS val 1750623302 ecr
0,nop,wscale 7], length 0
04:41:22.009097 IP x.x.x.x.40069 > 118.69.68.219.443: Flags [S], seq
2650257073, win 14600, options [mss 1460,sackOK,TS val 1750624304 ecr
0,nop,wscale 7], length 0
04:41:30.025097 IP x.x.x.x.40069 > 118.69.68.219.443: Flags [S], seq
2650257073, win 14600, options [mss 1460,sackOK,TS val 1750626308 ecr
0,nop,wscale 7], length 0
04:41:30.257270 IP 118.69.68.219.443 > x.x.x.x.40069: Flags [S.], seq
571024000, ack 2650257074, win 14480, options [mss 1398,sackOK,TS val
1060007116 ecr 1750626308,nop,wscale 5], length 0
04:41:30.257289 IP x.x.x.x.40069 > 118.69.68.219.443: Flags [.], ack 1, win
115, options [nop,nop,TS val 1750626366 ecr 1060007116], length 0
04:41:30.257429 IP x.x.x.x.40069 > 118.69.68.219.443: Flags [P.], seq
1:321, ack 1, win 115, options [nop,nop,TS val 1750626366 ecr 1060007116],
length 320



On Mon, Dec 9, 2013 at 10:53 AM, Neddy <nginx-forum at nginx.us> wrote:

> I added Essential bundle CA cert into a certchain, but it's no change.
>
> Posted at Nginx Forum:
> http://forum.nginx.org/read.php?2,245344,245350#msg-245350
>
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20131209/0d4b90bb/attachment.html>


More information about the nginx mailing list