Willy Tarreau bfd5946aa1 MINOR: ssl: add a global tunable for the max SSL/TLS record size ... Add new tunable "tune.ssl.maxrecord". Over SSL/TLS, the client can decipher the data only once it has received a full record. With large records, it means that clients might have to download up to 16kB of data before starting to process them. Limiting the record size can improve page load times on browsers located over high latency or low bandwidth networks. It is suggested to find optimal values which fit into 1 or 2 TCP segments (generally 1448 bytes over Ethernet with TCP timestamps enabled, or 1460 when timestamps are disabled), keeping in mind that SSL/TLS add some overhead. Typical values of 1419 and 2859 gave good results during tests. Use "strace -e trace=write" to find the best value. This trick was first suggested by Mike Belshe : http://www.belshe.com/2010/12/17/performance-and-the-tls-record-size/ Then requested again by Ilya Grigorik who provides some hints here : http://ofps.oreilly.com/titles/9781449344764/_transport_layer_security_tls.html#ch04_00000101		2013-02-21 07:53:13 +01:00
..
acl.h
arg.h	REORG: buffers: split buffers into chunk,buffer,channel	2012-09-03 20:47:32 +02:00
auth.h
backend.h
capture.h
channel.h	CLEANUP: channel: remove any reference of the hijackers	2012-11-11 23:05:39 +01:00
checks.h
compression.h	MEDIUM: compression: use pool for comp_ctx	2012-11-21 01:56:47 +01:00
connection.h	MEDIUM: connection: introduce "struct conn_src" for servers and proxies	2012-12-09 10:04:39 +01:00
counters.h	MINOR: stats: report the total number of compressed responses per front/back	2012-11-24 14:54:13 +01:00
fd.h	MAJOR: polling: remove unused callbacks from the poller struct	2012-11-11 21:02:34 +01:00
freq_ctr.h
global.h	MINOR: ssl: add a global tunable for the max SSL/TLS record size	2013-02-21 07:53:13 +01:00
hdr_idx.h
lb_chash.h
lb_fas.h
lb_fwlc.h
lb_fwrr.h
lb_map.h
listener.h	DOC: tfo: bump required kernel to linux-3.7	2013-02-14 00:03:04 +01:00
log.h	BUG/MINOR: log: make log-format, unique-id-format and add-header more independant	2012-12-28 09:51:00 +01:00
obj_type.h	MAJOR: connection: replace struct target with a pointer to an enum	2012-11-12 00:42:33 +01:00
peers.h	MEDIUM: checks: Add agent health check	2013-02-13 11:03:28 +01:00
pipe.h
port_range.h
proto_http.h	MEDIUM: http: add support for "http-request tarpit" rule	2012-12-28 14:47:19 +01:00
proto_tcp.h
protocol.h	MEDIUM: tcp: add explicit support for delayed ACK in connect()	2012-11-24 10:24:27 +01:00
proxy.h	MEDIUM: checks: Add agent health check	2013-02-13 11:03:28 +01:00
queue.h
sample.h	BUG/MAJOR: ensure that hdr_idx is always reserved when L7 fetches are used	2012-10-05 22:46:09 +02:00
server.h	MEDIUM: connection: introduce "struct conn_src" for servers and proxies	2012-12-09 10:04:39 +01:00
session.h	CLEANUP: session: use an array for the stick counters	2012-12-09 15:57:16 +01:00
signal.h
ssl_sock.h	MEDIUM: ssl: add support for SNI and wildcard certificates	2012-09-10 09:27:02 +02:00
stick_table.h	MEDIUM: stick-table: allocate the table key of size buffer size	2012-10-29 21:56:59 +01:00
stream_interface.h	MAJOR: connection: replace struct target with a pointer to an enum	2012-11-12 00:42:33 +01:00
task.h
template.h