Jump to content


Photo

Poor Performance - SSL

Started by Richard Round , 11 April 2017 - 03:10 PM
2 replies to this topic

Richard Round Members

Richard Round
  • 15 posts

Posted 11 April 2017 - 03:10 PM

We have a .net application that calls a web service (that we have written)  via https.  The web service is installed on two machines (API01 and API02) and these are load balanced over SSL on 443

 

We have a test harness which calls the API which is run currently from a single machine.

If we amend the DNS setting so that the URL points at one of the API machines the API calls succeed and an response code of 200 is returned.

 

When the DNS setting is amended to use the load balanced VIP between the two API machines we have noticed that some of the response times take a long time, this has caused our automated regression test pack to fail.  This isn’t consistent but the values range from a few milliseconds (which we expect) to 92 seconds. 

 

When we look at the logs on IIS for the actual requests IIS implies that the request has been dealt with in normally less than 30 milliseconds.

 

Any ideas to improve this?

 

Netscaler 7500 x2 HA. NS10.5 61.11.nc



Paul Blitz Members

Paul Blitz
  • 3,767 posts

Posted 12 April 2017 - 09:10 AM

take a look at article CTX 207005:

 

https://support.citrix.com/article/CTX207005

 

It seems that the TCP, when used with SSL, needs to be rather more aggressive than the default settings



Richard Round Members

Richard Round
  • 15 posts

Posted 12 April 2017 - 10:16 AM

We are making HTTPS requests though, not HTTP?

 

EDIT - Misread the article. I'll give it a whirl....thanks!