Project

General

Profile

Actions

Feature #1397

closed

Disable SSL

Added by fred flint over 9 years ago. Updated about 5 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
08/04/2014
Due date:
% Done:

0%

Estimated time:

Description

With SSL enabled the Web GUI is very slow when done over WAN/Internet. It would be really nice if there was a simple setting to disable SSL. Right now I do it manually which has to be done is several places and gets overwritten when there is an update.

Even better would be if Both SSL and non-SSL were active at the same time so if someone was paranoid about typing in their password they could chose to log in via https. Or perhaps an option to forces https for admin and http for everyone else.

Actions #1

Updated by fred flint over 9 years ago

This is for v3 which forces SSL by default as opposed to v2 which does not.

Actions #2

Updated by Demian Biscocho over 9 years ago

Hey Fred,

SSL/HTTPS is only enabled by default on the admin section. You can still use regular HTTP on the agent interface.

Actions #3

Updated by fred flint over 9 years ago

I figured out a way to speed things up significantly by enabling keepalive and disabling slower cyphers in apache.

KeepAlive On

SSLHonorCipherOrder On
SSLCipherSuite ALL:!ADH:!EXP:!LOW:!RC2:!3DES:!SEED:!RC4:+HIGH:+MEDIUM

Actions #4

Updated by Demian Biscocho over 9 years ago

Is your server behind a firewall? We haven't encountered any speed issues using HTTPS over the internet (server is on a public IP).

Actions #5

Updated by fred flint over 9 years ago

The server is not behind a firewall. No iptables. Nothing. It's a direct connection to a public static IP.

We have seen this with other self signed software that forces SSL as well. Elastix in particular. Disabling SSL fixes it. Since that is much more difficult in Gotoautodial we use the other method explained above. It's night and day difference 100% reproducible across multiple installations.

Actions #6

Updated by fred flint over 9 years ago

If you run the server on a hosted VPS that is several hops and more than just a few ms away from you over the internet you will see it. You will not see it on a LAN or nearby server over a fast WAN.

Actions #7

Updated by Demian Biscocho over 9 years ago

We are accessing most of our servers over the internet (some on dedicated hardware and some on VPS with more than 180ms latency). Delay is acceptable compared to plain HTTP. Nothing close to what you are experiencing.

With SSL enabled the Web GUI is very slow when done over WAN/Internet

Access is almost the same as with our servers signed with EssentialSSL and self-signed ones. We can't really notice any difference.

Actions #8

Updated by fred flint over 9 years ago

I'm willing to bet you have Apache set to keepalive on. That makes all the difference in the world. Using lower overhead ciphers and enable caching for static files improves things a bit more.

Actions #9

Updated by Demian Biscocho about 5 years ago

  • Status changed from New to Rejected
Actions

Also available in: Atom PDF

Go to top