bryancall opened a new pull request, #13956: URL: https://github.com/apache/trafficserver/pull/13956
The pqssr log field is documented as reporting whether the connection to the origin avoided a full TLS handshake. It actually reports whether ATS offered a cached session, so an origin that declines the session still logs 1. When the handshake to the origin completes without resuming the session, clear the resumption state. That also drops the curve and group copied from the cached session, so the curve and group fields report the ones from the full handshake. Inbound connections are unaffected. pqssr values will drop for origins that decline sessions. Declined offers can be estimated as proxy.process.ssl.ssl_origin_session_cache_hit minus proxy.process.ssl.origin_session_reused. This cherry-picks cleanly to 10.2.x. It does not apply to 10.1.x or 9.2.x: there pqssr reads a different flag, so those branches need their own fix. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
