performance is affected after merge OCSP changeset

Hi, There is a changeset fe919fd63b0b "client certificate validation with OCSP" , after merge this changeset, the performance seems not as good as before, the avg response time increased about 50~60ms. is there a way to optimize this problem? thanks ®ards

Re: performance is affected after merge OCSP changeset

> On 12 Oct 2021, at 10:41, sun edward wrote: > > Hi, > There is a changeset fe919fd63b0b "client certificate validation with > OCSP" , after merge this changeset, the performance seems not as good as > before, the avg response time increased about 50~60ms. is there a way to > optimiz

Re: [PATCH 4 of 5] QUIC: traffic-based flood detection

On Thu, Oct 07, 2021 at 02:36:17PM +0300, Roman Arutyunyan wrote: > # HG changeset patch > # User Roman Arutyunyan > # Date 1633602816 -10800 > # Thu Oct 07 13:33:36 2021 +0300 > # Branch quic > # Node ID e20f00b8ac9005621993ea19375b1646c9182e7b > # Parent 31561ac584b74d29af9a442afca47821a98

Re: [PATCH 5 of 5] QUIC: limited the total number of frames

On Thu, Oct 07, 2021 at 02:36:18PM +0300, Roman Arutyunyan wrote: > # HG changeset patch > # User Roman Arutyunyan > # Date 1633603050 -10800 > # Thu Oct 07 13:37:30 2021 +0300 > # Branch quic > # Node ID 25aeebb9432182a6246fedba6b1024f3d61e959b > # Parent e20f00b8ac9005621993ea19375b1646c91

Re: [PATCH 1 of 5] HTTP/3: removed client-side encoder support

On Thu, Oct 07, 2021 at 02:36:14PM +0300, Roman Arutyunyan wrote: > # HG changeset patch > # User Roman Arutyunyan > # Date 1633520939 -10800 > # Wed Oct 06 14:48:59 2021 +0300 > # Branch quic > # Node ID d53039c3224e8227979c113f621e532aef7c0f9b > # Parent 1ead7d64e9934c1a6c0d9dd3c5f1a3d643b

Re: [PATCH 2 of 5] HTTP/3: fixed request length calculation

On Thu, Oct 07, 2021 at 02:36:15PM +0300, Roman Arutyunyan wrote: > # HG changeset patch > # User Roman Arutyunyan > # Date 1633521076 -10800 > # Wed Oct 06 14:51:16 2021 +0300 > # Branch quic > # Node ID 1b87f4e196cce2b7aae33a63ca6dfc857b99f2b7 > # Parent d53039c3224e8227979c113f621e532aef7

Re: [PATCH 0 of 2] KTLS / SSL_sendfile() support

> On 27 Sep 2021, at 16:18, Maxim Dounin wrote: > > Hello! > > This patch series add kernel TLS / SSL_sendfile() support. > Works on FreeBSD 13.0+ and Linux with kernel 4.13+ (at least 5.2 > is recommended, tested with 5.11). > > The following questions need additional testing/attention: > >

[nginx] Proxy: disabled keepalive on extra data in non-buffered mode.

details: https://hg.nginx.org/nginx/rev/055b2a847117 branches: changeset: 7931:055b2a847117 user: Awdhesh Mathpal date: Thu Oct 07 19:23:11 2021 -0700 description: Proxy: disabled keepalive on extra data in non-buffered mode. The u->keepalive flag is initialized early if the respons

Re: Extra data from upstream and keepalive connections

Hello! On Mon, Oct 11, 2021 at 11:09:46PM -0700, Awdhesh Mathpal wrote: > Yes, Content-Length:0 is not the only case. The updated change > set looks good to me. Committed, thanks. https://hg.nginx.org/nginx/rev/055b2a847117 -- Maxim Dounin http://mdounin.ru/ _

[njs] SSL: fixed compatibility with OpenSSL 3.0.

details: https://hg.nginx.org/njs/rev/8e335c2ac447 branches: changeset: 1721:8e335c2ac447 user: Dmitry Volyntsev date: Tue Oct 12 17:24:31 2021 + description: SSL: fixed compatibility with OpenSSL 3.0. diffstat: auto/openssl | 26 +-- external/

[nginx] Synced ngx_http_subrequest() argument names (ticket #2255).

details: https://hg.nginx.org/nginx/rev/01829d162095 branches: changeset: 7932:01829d162095 user: Maxim Dounin date: Tue Oct 12 23:18:18 2021 +0300 description: Synced ngx_http_subrequest() argument names (ticket #2255). diffstat: src/http/ngx_http_core_module.h | 4 ++-- 1 files

Should continue when ngx_quic_bpf_group_add_socket failed with adding one socket during reloading

ngx_quic_bpf_module_init: Should continue when ngx_quic_bpf_group_add_socket failed with adding one socket during reloading? Gao,Yan(ACG VCP) ___ nginx-devel mailing list nginx-devel@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx-devel