Apache Virtual host site is very slow on https but fast on http

vicky219 · 07-05-2017, 06:27 AM

Backgroud: I have a multiple virtual host site setup on two webservers behind an ELB. Each virtual host site has an ssl certificate and key(domain.key,domain.bundle.crt) under /etc/httpd/ssl. There is also a Route53 setup which direct the traffic to my ELB and the to these webservers.

Issue: I have a site say site1.com and site2.com is setup as an alias in site1.com config file. So when I access http://site2.com(http) then its considerably fast compared to https://site2.com(https).

I have checked the site1.com virtual host logs but didnt find any error also I have checked the 01-cgi.conf file under /etc/httpd/conf.modules.d but didnt find any MaxRequestWorkers setting

Quote:

# This configuration file loads a CGI module appropriate to the MPM
# which has been configured in 00-mpm.conf. mod_cgid should be used
# with a threaded MPM; mod_cgi with the prefork MPM.

<IfModule mpm_worker_module>
LoadModule cgid_module modules/mod_cgid.so
</IfModule>
<IfModule mpm_event_module>
LoadModule cgid_module modules/mod_cgid.so
</IfModule>
<IfModule mpm_prefork_module>
LoadModule cgi_module modules/mod_cgi.so
</IfModule>

I am measuring the site speed online and the site with https is taking bit long(5secs more) time to load when compared to https.

I did some research and found that I may need to increase the MaxRequestSettings in http.conf file but neither I find MaxRequest or MPM, prefork directives in my conf file.

How could I resolve this issue.

Habitual · 07-05-2017, 09:31 AM

Welcome to LQ!

I replied in "that other forum".

and I'm not sure that route53 is factor in the 5s difference. Dunno.
Have fun at LQ.

Habitual · 07-05-2017, 09:37 AM

Quote:

Originally Posted by vicky219

Issue: I have a site say site1.com and site2.com is setup as an alias in site1.com config file.

This seems a little "odd".
But so am I, so we're even.

Others may have more to say, but I can't think of a real-world use-case for such a configuration.
I must need coffee.

Have a Great Day!

Shiori-kun · 07-06-2017, 09:06 AM

This may seem dumb but are you sure tgat all the needed modules are loaded? Aliasing does not work properly with ssl, there is a known certificate issue when aliasing to another domain. But that is moot if the needed modules are not loaded properly.

Try using the mod-rewrite module and use a dns pointer. This is what I currently do for https aliasing and there is less than 250ms difference.

Also, you should let us know your flavor and version numbers of your system. Ex. Ubuntu server 14.45 with Apache 2.2-worker. This gives us the ability to spin a test server and see if we can replicate your issue and then give advice thats not just armchair advice.

jon.m · 07-06-2017, 10:07 AM

Bordering on the obvious, how's your CPU with floating point operations? HTTPS (SSL) leans on this. May be just another dead end -- consider it a possible clue.

sbaynes · 07-07-2017, 03:55 AM

Quote:

Originally Posted by jon.m

Bordering on the obvious, how's your CPU with floating point operations? HTTPS (SSL) leans on this. May be just another dead end -- consider it a possible clue.

Very true. HTTPS used to be avoided because of the compute cost.

Its more than just floating point. Modern CPUs also have various other bits of encryption support built in. If you compiled Apache yourself, check the compilation options will make use of such features. If running on a VM check support for such features is enabled in the VM.