BBlack has submitted this change and it was merged.
Change subject: reduce static ssl buffer size to fit 1 packet always
......................................................................
reduce static ssl buffer size to fit 1 packet always
As noted in the config commentary, this may need further tweaking
as we go, but this is a better starting point than the default
(16k).
Bug: T86666
Change-Id: Ic799b3e8c6becadbe594769fe3aa88f3343a9f4e
---
M templates/nginx/nginx.conf.erb
1 file changed, 8 insertions(+), 0 deletions(-)
Approvals:
BBlack: Looks good to me, approved
jenkins-bot: Verified
diff --git a/templates/nginx/nginx.conf.erb b/templates/nginx/nginx.conf.erb
index 7225824..533e3f4 100644
--- a/templates/nginx/nginx.conf.erb
+++ b/templates/nginx/nginx.conf.erb
@@ -92,6 +92,14 @@
<% if scope.function_os_version(['debian >= jessie']) -%>
# Disable RFC5077 tickets (may revisit later when client support is better)
ssl_session_tickets off;
+
+ # ssl_buffer_size: 1300 is a good magic value for minimizing TTFB, at the
+ # expense of server overhead and total throughput. We may have to back
+ # this off if it becomes a significant server performance issue, and we
+ # may want to set it higher (e.g. 4k) specifically for the upload caches
+ # to trade a little TTFB for throughput. This is something that will have
+ # to be watched, experimented on, and tuned as more load comes in...
+ ssl_buffer_size 1300;
<% end -%>
<%= @nginx_ssl_conf.join("\n") %>
<% end %>
--
To view, visit https://gerrit.wikimedia.org/r/194412
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ic799b3e8c6becadbe594769fe3aa88f3343a9f4e
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>
Gerrit-Reviewer: BBlack <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
