installed SSL and site is slow now

[NeoTurtle]

Hello everyone. We're running WinNT 4.0 SP6a and IIS 4.0 with SSL. Before SSL, our site was running geat. Now that we installed SSL, it's realy, really, really slow. I just realized that I can access any part of the site with https and not just the pages I specified. I checked the entire site in the IIS console and it doesn't require a secure connection, except for the pages I specified. Any know what might be causing this?

Thanks in advance . . .

 

[chiph]

SSL is mathematically intense. You may want to investigate a hardware encryption accelerator. You can find out more at:

http://www.kegel.com/ssl/hw.html

Chip H.

 

[epohl]

chiph,

Agreed SSL will typically increase the load by 5 times just by running it. You also might want to look at upgrading the hardware if this is an older server.

 

[LesleyW]

What's happening is probably that all the pages are using HTTPS (which means SSL) because the first one is and it is picking up the same protocol when it makes the URL.

We had similar problems and there is a solution you can easily code using asp. What we did was force the protocol to use HTTP for those pages that did not require SSL and HTTP for those that did.

This worked because an Asp file was working out where to route people to next, so say from file1.asp (which uses SSL) you post to file1manager.asp.

Within file1manager.asp you do some processing and determine what page to redirect to. Don't just write "response.redirect file2.asp" because that will continue to use SSL. Instead write "response.redirect http:/myapp/file2.asp". That uses VBScript but I am sure it is easily replicated in Javascript or Perl.

You might want to store the domain name in an application variable set in global.asa, as then you can change it easily.

Hope that helps, if I have given insufficient details please let me know (on this thread); I have done this for a live application and it works.


Lesley

 

[NeoTurtle]

Thanks for your help guys!