For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ray_Dodier_1102's avatar
Ray_Dodier_1102
Icon for Nimbostratus rankNimbostratus
Sep 03, 2010

SSL connect time diffs between domains (VIPs)

I serve HTTPS content from two different domains and each domain name corresponds to a VIP. What I'm seeing is the SSL connect time from one domain is about twice that of the other domain.     N...
application delivery
design
performance
testing
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Sep 13, 2010
Could be lots of things... What I'd suggest is you break it down and look at each portion of the connection individually.

 

 

e.g.

 

1. The SSL connection. Use CURL or openssl to create a connection and make a request while using tcpdump to save the traffic for that connection (Use a suitable filter). Then have a look with wireshark, (Or tcpdump again if you're confirmable with that) to determine if there's a big difference in the SSL negotiation between the two VS's

 

 

2. Using HTTPWatch, or firebug or something similar have a look to see if it's the connection time or request time that's making a difference between the two.

 

 

3. tcpdump the backend traffic. Perhaps the backend static pools are the problem. Do they both respond in the same time?

 

 

H