[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SSL for screenshots.debian.net?



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Some raw data…

$ while true ; do cat /proc/sys/kernel/random/entropy_avail ; sleep 1;
done
129
153
134
180
183
174
174
134
192
175
179
188
135
183


$ time curl https://screenshots.debian.net/ >/dev/null
real	0m11.148s
user	0m0.016s
sys	0m0.012s


$ apache2ctl status
Apache Server Status for localhost

Server Version: Apache/2.2.16 (Debian) mod_ssl/2.2.16 OpenSSL/0.9.8o
mod_wsgi/
    3.3 Python/2.6.6
Server Built: Mar 3 2013 12:12:28

-
-------------------------------------------------------------------------------

Current Time: Wednesday, 12-Feb-2014 13:08:31 EST
Restart Time: Wednesday, 12-Feb-2014 13:07:18 EST
Parent Server Generation: 10
Server uptime: 1 minute 12 seconds
Total accesses: 3461 - Total Traffic: 44.9 MB
CPU Usage: u26.13 s2.46 cu0 cs0 - 39.7% CPU load
48.1 requests/sec - 0.6 MB/second - 13.3 kB/request
149 requests currently being processed, 1 idle workers

KKKKKKKKRRWRCRKKKRWKKKWWK.......................................
CWWWWKRRKKCRCKKKKKWCKKKKK.......................................
CKKKWRKKKKKKCKKKKCRWKRCKK.......................................
KKKKCKCKKCRKCKKKRKKWWKWRK.......................................
_KWKKCKWRKKKKRRWKKKKWKWKK.......................................
KKCWKWKRKWKRKWKCKCWRKRKWK.......................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................
................................................................

Scoreboard Key:
"_" Waiting for Connection, "S" Starting up, "R" Reading Request,
"W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
"C" Closing connection, "L" Logging, "G" Gracefully finishing,
"I" Idle cleanup of worker, "." Open slot with no current process


The server sponsor from Vexxhost reacted very quickly though and has
offered a faster server. So I will deploy the application there and
try HTTPS globally again.

I may also try to put an nginx in front. Somehow I have a bad feeling
with mod_wsgi and Apache-mpm-worker.

…Christoph


On 12.02.2014 18:51, Martin Zobel-Helas wrote:
> Hi,
> 
> cat /proc/sys/kernel/random/entropy_avail ?
> 
> On Wed Feb 12, 2014 at 17:21:23 +0100, Christoph Haas wrote:
>> Quick note… I have tried to…
>> 
>> Redirect permanent / https://screenshots.debian.net/
>> 
>> But it only took 10 seconds and my (virtual) server started to
>> respond unbearably slowly. The system load seemed okay (0.8 with
>> 2 CPUs) but the response time was ~10 seconds per HTTPS request.
>> I'm not yet sure what the problem is because KeepAlive on Apache
>> level is on and there are enough sockets available according to
>> "apache2ctl fullstatus" shows enough enough open slots.
>> 
>> So I'll leave HTTPS on but I can't currently redirect everyone to
>> use HTTPS. Ideas welcome.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlL7uh4ACgkQCV53xXnMZYYfpgCgpedpVMdRESKUyzhjBf9PbVTt
fMwAoK83RsX0ozn++LqO7m+MxJK40iP9
=cKNt
-----END PGP SIGNATURE-----


Reply to: