apache2 with letsencrypt is very slowletsencrypt free SSL instaltion on cpanel serverHow can I use Let's Encrypt (letsencrypt.org) as a free SSL certificate provider?Debian jessie nginx with openssl 1.0.2 to use ALPN rather than NPNHow to build Apache httpd 2.4.20 on CentOS 7 with http2 support?letsencrypt has stopped auto renewingHow to get Apache, Ubuntu, and PHP7 to work with HTTP/2?Different document root on apache depending on listening interface for LetsEncrypt SSL certificate?Using “Let's Encrypt” TLS with a Google Load Balancer? (Kubernetes/GKE)Apache2 with HTTP/2 serves some content with h2, some with http/1.1ERR_SSL_PROTOCOL_ERROR after http2 enabled
Are there any important biographies of nobodies?
With Ubuntu 18.04, how can I have a hot corner that locks the computer?
Inward extrusion is not working
What speaks against investing in precious metals?
Giant Steps - Coltrane and Slonimsky
Is White controlling this game?
Check if three arrays contains the same element
Soft question: Examples where lack of mathematical rigour cause security breaches?
What makes Ada the language of choice for the ISS's safety-critical systems?
Why doesn't Adrian Toomes give up Spider-Man's identity?
How to trick the reader into thinking they're following a redshirt instead of the protagonist?
How to manually rewind film?
A IP can traceroute to it, but can not ping
How to draw a Technology Radar?
Implement Own Vector Class in C++
How to hide an urban landmark?
Is it possible to have a wealthy country without a middle class?
How to hide rifle during medieval town entrance inspection?
How can I tell the difference between unmarked sugar and stevia?
Extreme flexible working hours: how to control people and activities?
Thread Pool C++ Implementation
Why would future John risk sending back a T-800 to save his younger self?
Is using haveibeenpwned to validate password strength rational?
Union with anonymous struct with flexible array member
apache2 with letsencrypt is very slow
letsencrypt free SSL instaltion on cpanel serverHow can I use Let's Encrypt (letsencrypt.org) as a free SSL certificate provider?Debian jessie nginx with openssl 1.0.2 to use ALPN rather than NPNHow to build Apache httpd 2.4.20 on CentOS 7 with http2 support?letsencrypt has stopped auto renewingHow to get Apache, Ubuntu, and PHP7 to work with HTTP/2?Different document root on apache depending on listening interface for LetsEncrypt SSL certificate?Using “Let's Encrypt” TLS with a Google Load Balancer? (Kubernetes/GKE)Apache2 with HTTP/2 serves some content with h2, some with http/1.1ERR_SSL_PROTOCOL_ERROR after http2 enabled
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have a problem with my server configurations,
My site works great with http requests, but when I changed it to https using letsencrypt certificate - to enable http2 - the server became really slow.
a normal request with http will take from 4 to 7 seconds, but when using https most requests (90%) take up to 45 seconds.
I have the latest stable version of apache and I've followed the official docs for installing letsencrypt.
I have been searching for a solution for almost a week, but with no luck, how can this be fixed?
apache-2.4 lets-encrypt http2
asked May 2 '16 at 11:51
CooperCooper
61
add a comment |
I have a problem with my server configurations,
My site works great with http requests, but when I changed it to https using letsencrypt certificate - to enable http2 - the server became really slow.
a normal request with http will take from 4 to 7 seconds, but when using https most requests (90%) take up to 45 seconds.
I have the latest stable version of apache and I've followed the official docs for installing letsencrypt.
I have been searching for a solution for almost a week, but with no luck, how can this be fixed?
apache-2.4 lets-encrypt http2
asked May 2 '16 at 11:51
CooperCooper
61
Is it slow with HTTP1.1 already or only when using HTTP2? And this has nothing to do with Letsencrypt specifically, but would be a general TLS problem... Also, log file entries?
– Sven♦
May 2 '16 at 11:57
@Sven tried to disable http2 and use HTTP1.1, and now I don't encounter any slowness, thank you. so that means the problem is with http2 right?! but what it is?
– Cooper
May 2 '16 at 17:12
Post a test using something like webpagetest.org, along with corresponding access logs. Ideally test just retrieving a single jpeg file, but an example retrieving a full webpage would be useful too.
– Tim
May 3 '16 at 23:42
add a comment |
I have a problem with my server configurations,
My site works great with http requests, but when I changed it to https using letsencrypt certificate - to enable http2 - the server became really slow.
a normal request with http will take from 4 to 7 seconds, but when using https most requests (90%) take up to 45 seconds.
I have the latest stable version of apache and I've followed the official docs for installing letsencrypt.
I have been searching for a solution for almost a week, but with no luck, how can this be fixed?
apache-2.4 lets-encrypt http2
asked May 2 '16 at 11:51
CooperCooper
61
I have a problem with my server configurations,
My site works great with http requests, but when I changed it to https using letsencrypt certificate - to enable http2 - the server became really slow.
a normal request with http will take from 4 to 7 seconds, but when using https most requests (90%) take up to 45 seconds.
I have the latest stable version of apache and I've followed the official docs for installing letsencrypt.
I have been searching for a solution for almost a week, but with no luck, how can this be fixed?
apache-2.4 lets-encrypt http2
apache-2.4 lets-encrypt http2
asked May 2 '16 at 11:51
CooperCooper
61
asked May 2 '16 at 11:51
CooperCooper
61
asked May 2 '16 at 11:51
CooperCooper
61
asked May 2 '16 at 11:51
CooperCooper
61
asked May 2 '16 at 11:51
CooperCooper
61
61
Is it slow with HTTP1.1 already or only when using HTTP2? And this has nothing to do with Letsencrypt specifically, but would be a general TLS problem... Also, log file entries?
– Sven♦
May 2 '16 at 11:57
@Sven tried to disable http2 and use HTTP1.1, and now I don't encounter any slowness, thank you. so that means the problem is with http2 right?! but what it is?
– Cooper
May 2 '16 at 17:12
Post a test using something like webpagetest.org, along with corresponding access logs. Ideally test just retrieving a single jpeg file, but an example retrieving a full webpage would be useful too.
– Tim
May 3 '16 at 23:42
add a comment |
Is it slow with HTTP1.1 already or only when using HTTP2? And this has nothing to do with Letsencrypt specifically, but would be a general TLS problem... Also, log file entries?
– Sven♦
May 2 '16 at 11:57
@Sven tried to disable http2 and use HTTP1.1, and now I don't encounter any slowness, thank you. so that means the problem is with http2 right?! but what it is?
– Cooper
May 2 '16 at 17:12
Post a test using something like webpagetest.org, along with corresponding access logs. Ideally test just retrieving a single jpeg file, but an example retrieving a full webpage would be useful too.
– Tim
May 3 '16 at 23:42
Is it slow with HTTP1.1 already or only when using HTTP2? And this has nothing to do with Letsencrypt specifically, but would be a general TLS problem... Also, log file entries?
– Sven♦
May 2 '16 at 11:57
Is it slow with HTTP1.1 already or only when using HTTP2? And this has nothing to do with Letsencrypt specifically, but would be a general TLS problem... Also, log file entries?
– Sven♦
May 2 '16 at 11:57
@Sven tried to disable http2 and use HTTP1.1, and now I don't encounter any slowness, thank you. so that means the problem is with http2 right?! but what it is?
– Cooper
May 2 '16 at 17:12
@Sven tried to disable http2 and use HTTP1.1, and now I don't encounter any slowness, thank you. so that means the problem is with http2 right?! but what it is?
– Cooper
May 2 '16 at 17:12
Post a test using something like webpagetest.org, along with corresponding access logs. Ideally test just retrieving a single jpeg file, but an example retrieving a full webpage would be useful too.
– Tim
May 3 '16 at 23:42
Post a test using something like webpagetest.org, along with corresponding access logs. Ideally test just retrieving a single jpeg file, but an example retrieving a full webpage would be useful too.
– Tim
May 3 '16 at 23:42
add a comment |
1 Answer
1
active
oldest
votes
1) Implementing SSL/TLS will naturally have extra latency. This is because the secure communication needs to be negotiated first. So HTTP is faster than HTTPS. But this should normally not cause your 4-7 seconds load time to go as high as 45 seconds.
2) This is not a Let's Encrypt issue. They just provide you with the certificate, like any other CAs out there. Their certificates do not take more time than others to load or negotiate.
3) Check if you have optimized your system already to use SSL/TLS. I suggest you just use 2048 bit keys rather than 4096 bit. All 2048 bit keys are considered safe as per industry standards and 4096 bit would only cost you more processing resources and time. But still, even with 4096 bit, that would not cost your load time to go up to 45 seconds.
You can also refer to Mozilla for some updated SSL directives and Ciphers.
Lastly, consider checking your VirtualHost and SSL configurations /etc/apache2/mods-enabled/ssl.conf. The issue is not directly with your certificate.
edited May 3 '16 at 23:41
Tim
18.7k41951
answered May 3 '16 at 23:20
jarvisjarvis
1,28611129
Thanks for your answer, the problem appears to be the use of http2 not the ssl, once I disabled h2 the site returned to be fast with https, but h2 should help in improving the speed not make it very slow. I have search for this problem, but all I found was "disable h2" is there any other solution?
– Cooper
May 5 '16 at 11:40
What version of Apache (2.4.20 I guess if on latest stable version?). What version of openssl? Anything in log files? Developer of mod_http2 is very responsive for issues if you raise an issue with sufficient detail here: github.com/icing/mod_h2/issues
– Barry Pollard
May 5 '16 at 13:52
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f774285%2fapache2-with-letsencrypt-is-very-slow%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
1) Implementing SSL/TLS will naturally have extra latency. This is because the secure communication needs to be negotiated first. So HTTP is faster than HTTPS. But this should normally not cause your 4-7 seconds load time to go as high as 45 seconds.
2) This is not a Let's Encrypt issue. They just provide you with the certificate, like any other CAs out there. Their certificates do not take more time than others to load or negotiate.
3) Check if you have optimized your system already to use SSL/TLS. I suggest you just use 2048 bit keys rather than 4096 bit. All 2048 bit keys are considered safe as per industry standards and 4096 bit would only cost you more processing resources and time. But still, even with 4096 bit, that would not cost your load time to go up to 45 seconds.
You can also refer to Mozilla for some updated SSL directives and Ciphers.
Lastly, consider checking your VirtualHost and SSL configurations /etc/apache2/mods-enabled/ssl.conf. The issue is not directly with your certificate.
edited May 3 '16 at 23:41
Tim
18.7k41951
answered May 3 '16 at 23:20
jarvisjarvis
1,28611129
Thanks for your answer, the problem appears to be the use of http2 not the ssl, once I disabled h2 the site returned to be fast with https, but h2 should help in improving the speed not make it very slow. I have search for this problem, but all I found was "disable h2" is there any other solution?
– Cooper
May 5 '16 at 11:40
What version of Apache (2.4.20 I guess if on latest stable version?). What version of openssl? Anything in log files? Developer of mod_http2 is very responsive for issues if you raise an issue with sufficient detail here: github.com/icing/mod_h2/issues
– Barry Pollard
May 5 '16 at 13:52
add a comment |
1) Implementing SSL/TLS will naturally have extra latency. This is because the secure communication needs to be negotiated first. So HTTP is faster than HTTPS. But this should normally not cause your 4-7 seconds load time to go as high as 45 seconds.
2) This is not a Let's Encrypt issue. They just provide you with the certificate, like any other CAs out there. Their certificates do not take more time than others to load or negotiate.
3) Check if you have optimized your system already to use SSL/TLS. I suggest you just use 2048 bit keys rather than 4096 bit. All 2048 bit keys are considered safe as per industry standards and 4096 bit would only cost you more processing resources and time. But still, even with 4096 bit, that would not cost your load time to go up to 45 seconds.
You can also refer to Mozilla for some updated SSL directives and Ciphers.
Lastly, consider checking your VirtualHost and SSL configurations /etc/apache2/mods-enabled/ssl.conf. The issue is not directly with your certificate.
edited May 3 '16 at 23:41
Tim
18.7k41951
answered May 3 '16 at 23:20
jarvisjarvis
1,28611129
Thanks for your answer, the problem appears to be the use of http2 not the ssl, once I disabled h2 the site returned to be fast with https, but h2 should help in improving the speed not make it very slow. I have search for this problem, but all I found was "disable h2" is there any other solution?
– Cooper
May 5 '16 at 11:40
What version of Apache (2.4.20 I guess if on latest stable version?). What version of openssl? Anything in log files? Developer of mod_http2 is very responsive for issues if you raise an issue with sufficient detail here: github.com/icing/mod_h2/issues
– Barry Pollard
May 5 '16 at 13:52
add a comment |
1) Implementing SSL/TLS will naturally have extra latency. This is because the secure communication needs to be negotiated first. So HTTP is faster than HTTPS. But this should normally not cause your 4-7 seconds load time to go as high as 45 seconds.
2) This is not a Let's Encrypt issue. They just provide you with the certificate, like any other CAs out there. Their certificates do not take more time than others to load or negotiate.
3) Check if you have optimized your system already to use SSL/TLS. I suggest you just use 2048 bit keys rather than 4096 bit. All 2048 bit keys are considered safe as per industry standards and 4096 bit would only cost you more processing resources and time. But still, even with 4096 bit, that would not cost your load time to go up to 45 seconds.
You can also refer to Mozilla for some updated SSL directives and Ciphers.
Lastly, consider checking your VirtualHost and SSL configurations /etc/apache2/mods-enabled/ssl.conf. The issue is not directly with your certificate.
edited May 3 '16 at 23:41
Tim
18.7k41951
answered May 3 '16 at 23:20
jarvisjarvis
1,28611129
1) Implementing SSL/TLS will naturally have extra latency. This is because the secure communication needs to be negotiated first. So HTTP is faster than HTTPS. But this should normally not cause your 4-7 seconds load time to go as high as 45 seconds.
2) This is not a Let's Encrypt issue. They just provide you with the certificate, like any other CAs out there. Their certificates do not take more time than others to load or negotiate.
3) Check if you have optimized your system already to use SSL/TLS. I suggest you just use 2048 bit keys rather than 4096 bit. All 2048 bit keys are considered safe as per industry standards and 4096 bit would only cost you more processing resources and time. But still, even with 4096 bit, that would not cost your load time to go up to 45 seconds.
You can also refer to Mozilla for some updated SSL directives and Ciphers.
Lastly, consider checking your VirtualHost and SSL configurations /etc/apache2/mods-enabled/ssl.conf. The issue is not directly with your certificate.
edited May 3 '16 at 23:41
Tim
18.7k41951
answered May 3 '16 at 23:20
jarvisjarvis
1,28611129
edited May 3 '16 at 23:41
Tim
18.7k41951
edited May 3 '16 at 23:41
Tim
18.7k41951
edited May 3 '16 at 23:41
Tim
18.7k41951
18.7k41951
answered May 3 '16 at 23:20
jarvisjarvis
1,28611129
answered May 3 '16 at 23:20
jarvisjarvis
1,28611129
answered May 3 '16 at 23:20
jarvisjarvis
1,28611129
1,28611129
Thanks for your answer, the problem appears to be the use of http2 not the ssl, once I disabled h2 the site returned to be fast with https, but h2 should help in improving the speed not make it very slow. I have search for this problem, but all I found was "disable h2" is there any other solution?
– Cooper
May 5 '16 at 11:40
What version of Apache (2.4.20 I guess if on latest stable version?). What version of openssl? Anything in log files? Developer of mod_http2 is very responsive for issues if you raise an issue with sufficient detail here: github.com/icing/mod_h2/issues
– Barry Pollard
May 5 '16 at 13:52
add a comment |
Thanks for your answer, the problem appears to be the use of http2 not the ssl, once I disabled h2 the site returned to be fast with https, but h2 should help in improving the speed not make it very slow. I have search for this problem, but all I found was "disable h2" is there any other solution?
– Cooper
May 5 '16 at 11:40
What version of Apache (2.4.20 I guess if on latest stable version?). What version of openssl? Anything in log files? Developer of mod_http2 is very responsive for issues if you raise an issue with sufficient detail here: github.com/icing/mod_h2/issues
– Barry Pollard
May 5 '16 at 13:52
Thanks for your answer, the problem appears to be the use of http2 not the ssl, once I disabled h2 the site returned to be fast with https, but h2 should help in improving the speed not make it very slow. I have search for this problem, but all I found was "disable h2" is there any other solution?
– Cooper
May 5 '16 at 11:40
Thanks for your answer, the problem appears to be the use of http2 not the ssl, once I disabled h2 the site returned to be fast with https, but h2 should help in improving the speed not make it very slow. I have search for this problem, but all I found was "disable h2" is there any other solution?
– Cooper
May 5 '16 at 11:40
What version of Apache (2.4.20 I guess if on latest stable version?). What version of openssl? Anything in log files? Developer of mod_http2 is very responsive for issues if you raise an issue with sufficient detail here: github.com/icing/mod_h2/issues
– Barry Pollard
May 5 '16 at 13:52
What version of Apache (2.4.20 I guess if on latest stable version?). What version of openssl? Anything in log files? Developer of mod_http2 is very responsive for issues if you raise an issue with sufficient detail here: github.com/icing/mod_h2/issues
– Barry Pollard
May 5 '16 at 13:52
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f774285%2fapache2-with-letsencrypt-is-very-slow%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Is it slow with HTTP1.1 already or only when using HTTP2? And this has nothing to do with Letsencrypt specifically, but would be a general TLS problem... Also, log file entries?
– Sven♦
May 2 '16 at 11:57
@Sven tried to disable http2 and use HTTP1.1, and now I don't encounter any slowness, thank you. so that means the problem is with http2 right?! but what it is?
– Cooper
May 2 '16 at 17:12
Post a test using something like webpagetest.org, along with corresponding access logs. Ideally test just retrieving a single jpeg file, but an example retrieving a full webpage would be useful too.
– Tim
May 3 '16 at 23:42