Le Tue, May 14, 2019 at 02:08:35PM +0200, Stéphane Péneau 
[stephane.pen...@wanadoo.fr] a écrit:
[...]
> Je ne pense pas qu'il s'agisse d'une coïncidence. J'ai fait
> plusieurs fois le test d'utiliser pendant quelques minutes la couche
> en https, puis celle en http, et il n'y a pas photo... ;-)

Y'a un truc sur les acces https en ipv4 :

$ curl -4 -v --trace-time "https://proxy-ign.openstreetmap.fr/";
15:26:38.684249 * Hostname was NOT found in DNS cache
15:26:38.697338 *   Trying 77.95.65.41...
15:26:39.712568 * Connected to proxy-ign.openstreetmap.fr (77.95.65.41)
port 443 (#0)
15:26:39.713190 * successfully set certificate verify locations:
15:26:39.713215 *   CAfile: none
  CApath: /etc/ssl/certs
15:26:39.713334 * SSLv3, TLS handshake, Client hello (1):
15:26:42.076523 * SSLv3, TLS handshake, Server hello (2):
15:26:42.076607 * SSLv3, TLS handshake, CERT (11):

=> 3 secondes de latence dans la negociation ssl


Alors qu'en ipv6 :

$ curl -v --trace-time "https://proxy-ign.openstreetmap.fr/";
15:27:52.971813 * Hostname was NOT found in DNS cache
15:27:52.976103 *   Trying 2a03:9180:0:100::9...
15:27:52.993135 * Connected to proxy-ign.openstreetmap.fr
(2a03:9180:0:100::9) port 443 (#0)
15:27:52.993698 * successfully set certificate verify locations:
15:27:52.993721 *   CAfile: none
  CApath: /etc/ssl/certs
15:27:52.993840 * SSLv3, TLS handshake, Client hello (1):
15:27:53.204720 * SSLv3, TLS handshake, Server hello (2):
15:27:53.205826 * SSLv3, TLS handshake, CERT (11):
15:27:53.206800 * SSLv3, TLS handshake, Server key exchange

Et en HTTP en ipv4 :

$ curl -4 -v --trace-time "http://proxy-ign.openstreetmap.fr/";
15:28:14.001840 * Hostname was NOT found in DNS cache
15:28:14.006425 *   Trying 77.95.65.41...
15:28:14.029241 * Connected to proxy-ign.openstreetmap.fr (77.95.65.41)
port 80 (#0)
15:28:14.029303 > GET / HTTP/1.1
15:28:14.029303 > User-Agent: curl/7.38.0
15:28:14.029303 > Host: proxy-ign.openstreetmap.fr
15:28:14.029303 > Accept: */*
15:28:14.029303 > 
15:28:14.490772 < HTTP/1.1 302 Moved Temporarily


-- 
Dominique Rousseau
d...@lee-loo.net - 06 82 43 12 27

A l'instant où l'esclave décide qu'il ne sera plus esclave,
ses chaînes tombent.                      -- Mahatma Gandhi

_______________________________________________
Talk-fr mailing list
Talk-fr@openstreetmap.org
https://lists.openstreetmap.org/listinfo/talk-fr

Répondre à