ssl cache pooling ? (kind of)

Maxim Dounin mdounin at mdounin.ru
Sun Mar 23 14:18:13 UTC 2014


Hello!

On Sun, Mar 23, 2014 at 06:50:18AM -0400, Larry wrote:

> Yep,
> 
> Missed that -big- one. Failed idea.
> 
> Many example show how to loadbalance ssl without problems like lvs, haproxy
> 
> http://virtuallyhyper.com/2013/05/configure-haproxy-to-load-balance-sites-with-ssl/
> 
> So, Am I basically creating an imaginary problem ?
> 
> And if so, why ssl ticket (rfc 5077) even exists ?

Both session cache and session tickets are needed to reduce cost 
of creating of new connections.  It's not something mandatory, 
rather an optimization.

-- 
Maxim Dounin
http://nginx.org/



More information about the nginx mailing list