SSL session caching in nginx

Re:SSL session caching in nginx by nwmcsween on Monday June 27, 2011 @07:08PM (#2703349)

You'll usually run out of entropy before cpu usage becomes relevant with SSL processing, I've seen old versions of apache hang with little or no entropy to process SSL connections. I recommend some sort of RNG or a poor mans software version such as http://www.issihosts.com/haveged/

[ Parent | on HN ]

Re:SSL session caching in nginx by epi0Bauqu on Tuesday June 28, 2011 @09:16AM (#2705247)

This comment really opened my eyes -- thank you! I am still a bit confused though. I think I was running out of entropy, but it seems nginx should use /dev/urandom, which supposedly doesn't block -- just becomes less random when entropy runs out. So is nginx set up to block when entropy is depleted and that is why this happens?

[ Parent | on HN ]