Comment on Balancer Battle – Load testing HAproxy, Nginx and HTTP-Proxy's WebSocket supportComments−nodesocket13y> I had the wrong ciphers configured. After some quick tweaking and a confirmation using openssl s_client -connect server:ipIs this in the nginx config? Can anybody elaborate a bit further? Here is what I am currently using in my nginx config for ssl: ssl_session_cache shared:SSL_CACHE:8m; ssl_session_timeout 5m; # Mitigate BEAST attacks ssl_ciphers RC4:HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on;−V1OP13yAre you referring to the cipher verification? I used: openssl s_client -host localhost -port 8082 Which is a openssl command. These settings were used for testing SSL: https://github.com/observing/balancerbattle/blob/master/ngin...See https://gist.github.com/3rd-Eden/5345018 for the output of the openssl s_client for those ciphers. You'll see that `cipher : RC4-SHA` is used here. Which is one of the fastest if not the fastest cipher available.−wereHamster13yUhm.. https://github.com/observing/balancerbattle/blob/master/ngin... ?
Comments
> I had the wrong ciphers configured. After some quick tweaking and a confirmation using openssl s_client -connect server:ip
Is this in the nginx config? Can anybody elaborate a bit further? Here is what I am currently using in my nginx config for ssl:
Are you referring to the cipher verification? I used:
Which is a openssl command. These settings were used for testing SSL: https://github.com/observing/balancerbattle/blob/master/ngin...See https://gist.github.com/3rd-Eden/5345018 for the output of the openssl s_client for those ciphers. You'll see that `cipher : RC4-SHA` is used here. Which is one of the fastest if not the fastest cipher available.
Uhm.. https://github.com/observing/balancerbattle/blob/master/ngin... ?