By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

It is very slow after I switch http to https

0

I requested Certificates from ACM, and I used a Network Load Balancer to route requests to my EC2 server.

I found that each https request cost more that 40% time more that http request.

I did some analysis, the ssl session is not reused when I use https. I thought every request will complete the handshake of TLS.

Anyone knows how to solve this problem?

  • romerogt
    9 months ago

    Some questions to better understand:

    Is there a reason for using NLB instead of Application Load Balancer? ALB will multiplex connections to your instances, thus reducing workload and might be a better fit. What configuration does your TLS listener has? Is your test being done with browser or from an application?

  • david
    9 months ago

    My purpose is configuring SSL certificates for https. Currently, there is only one EC2 server, so I think the NLB can work for me. By the way, I am not very clear if I should choose ALB instead of NLB.

    TLS listener configuration: port 443, wildcard certificates, default is *.dm.com, two for SNI *.app.dm.com and *.h5.dm.com, nothing else.

    I ran test from an application.

Topics
ComputeSecurity, Identity, & Compliance
Tags
Amazon EC2AWS Certificate ManagerNetwork Load Balancer
Language
English
david
asked 9 months ago431 views
1 Answer
0

Using an ALB will allow you to terminate the SSL based encryption at the ALB. This eliminates the processing burden of encrypting and decrypting traffic sent through SSL on the web server, allowing it to focus its resources for serving web content. By utilising Amazon Certificate Manager with an ALB, the certificate will be stored securely, regularly rotated and updated automatically by AWS with no action on your part. This also greatly reduces your SSL administration not only during the initial build and ongoing certificate renewals but also simplifies auto scaling configurations in addition to addressing certain types of security attacks away from the web servers, there is also cost savings to be had with certificate renewals and reduced server specifications without the decryption/encryption overhead.

profile pictureAWS
Dave Connelly AWS
answered 9 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content