Opened 10 years ago

Closed 10 years ago

#451 closed enhancement (fixed)

Turn NGX_SSL_BUFSIZE into a configuration directive

Reported by: Steffen Weber Owned by:
Priority: minor Milestone:
Component: nginx-core Version: 1.3.x
Keywords: Cc:
uname -a:
nginx -V: nginx version: nginx/1.4.4

Description

Nginx uses a hard-coded SSL buffer size of 16 KB (see NGX_SSL_BUFSIZE in ngx_event_openssl.h). Google employee Ilya Grigorik recommends lowering this size to 1 KB (see http://www.igvita.com/2013/10/24/optimizing-tls-record-size-and-buffering-latency/).

It would be nice if you could turn the compile-time constant "NGX_SSL_BUFSIZE" into a configuration directive.

Change History (1)

comment:1 by Maxim Dounin, 10 years ago

Resolution: fixed
Status: newclosed

The ssl_buffer_size directive added by a297b7ad6f94. Not that it might not be a good idea to use 1k as a value, but general consensus seems to be that something like 4k or 8k should be good enough to minimize latency, see this thread.

Note: See TracTickets for help on using tickets.