SSL traffic / user authentication on intranet suddenly really slow

[1DMF]

Hi,

We have a webserver running member services over SSL with a PERL / SQL backend.

We have an area for internal staff to run configuration tools which has a password protected path with windows authentication, runs over SSL with PERL CGI.

Recently when you navigate to the password protected area, and enter your userid / password the system is really slow to log you in and the scripts run abismal, it used to log you in instantly and the PERL scripts ran lightening fast, now they egg time for ages. and navigating around the web app is painfully slow.

Any idea what might have caused this, it was working fine a few days ago and has been for years.

We have had an IT company mess with our in-house systems and reconfigure stuff after upgrading our SBS2003 to SBS2011 with dedicated SQL 2008R2 , but the webserver is co-located miles away and they shouldn't have touched this?

Also other external websites that run over SSL seem to run fine, so am assuming it isn't a firewall issue?

Could they have messed with the internal AD DNS so our internal systems only are having this problem?

Any help tracking this down is appreciated.

1DMF.

"In complete darkness we are all the same, only our knowledge and wisdom separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

MIME::Lite TLS Email Encryption - Perl v0.02 beta

 

[tarn]

Only a guess but in my experiences of slow response to logins and requests always point to the server trying to reverse lookup the clients @IP (reverse DNS)

If you have access to the server it may be worth either snooping the incoming interface and or adding one of the clients statically into the servers host file and see if that resolves it for that host.

I'm sure you are on the right track with thinking DNS!

Good luck

Laurie.

 

[1DMF]

This is a web app and runs on a non-domain controller server. so no DNS to be added there.

I've got them to add forward/reverse lookup for the webserver on our internal domain. It's made no difference.






"In complete darkness we are all the same, only our knowledge and wisdom separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

Free Electronic Dance Music Downloads

 

[tarn]

Indeed very strange .......

I assume you have traced the routing (just in case the PC's are traversing the globe to get to the destination)?

Or have you tried dropping off your Anti Virus software for a short test period?

If it was working great and not now then something must have changed and network or interface would be the obvious areas.

Assuming the scripts (and their pay-load) is minimal then we should assume that if its network interface speed (dropped to 10 mbit 1/2 DUPLEX) you would never see such an impact!

Network snoop/WireShark to see what's happening would be my next step ...
Otherwise sorry I'm out of suggestions.

Laurie.