Have Geek Brain

Number of IP addresses on a website in IIS7

Is there any recommendation or limitation on the number of IP addresses that can be bound to a website in IIS7? I have a website that is linked to multiple IPs (each one has its own SSL certificate) and it looks like SSL processing on it is getting very slow.

0


source to share


1 answer


SSL has a cost in a handshake and a different cost to actually encrypt the data. Therefore, each new connection has a fixed cost component, and then a cost that is proportional to the length of the data sent.

You can design your sites to minimize the amount of content that requires encryption, for example by mixing in unprotected content (providing images via unspecified links). (sometimes generates hints in browsers, but users always seem to ignore this, and all major sites use this trick). You can also try to make the most of keep-alive connections, although this is something that browsers should handle quite automatically.



Ultimately SSL will be significantly more compute-intensive than a regular web page service, and therefore there is a whole market for cards with SSL accelerators! If you need to do SSL buckets, consider purchasing an accelerator.

+1


source






More articles:


All Articles