Bug#674142: make it possible to disable ssl compression in apache2 mod_ssl

May 23rd, 2012 - 07:00 am ET by Bjoern Jacke | Report spam
Package: apache2
Version: 2.2.16
Owner: debian-apache@lists.debian.org

Some browsers like Chrome/Chromium but also cmdline clients using openssl like
wget support ssl compression. This is a big problem for ssl enabled servers
when they offer big files. Pulling for example a (already compressed) 100MB
file via such a browser using https the ssl compression eats up CPU time
significantly. The overall performance of the server will also go down.
Multiple clients make it even worse. It should be possible to disable ssl
compression in mod_ssl to solve this issue.

Please consider to add the patch from
https://issues.apache.org/bugzilla/...cgi?idS219 to the Debian package.
It adds the parameter SSLCompression On/Off which allows to disable the ssl
compression. Maybe it is possible to get this even in Squeeze as it doesn't
change any default setting?



To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
email Follow the discussionReplies 2 repliesReplies Make a reply

Replies

#1 Arno Töll
June 05th, 2012 - 06:40 pm ET | Report spam
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)

Hi,

On 23.05.2012 12:17, Bjoern Jacke wrote:
Please consider to add the patch from
https://issues.apache.org/bugzilla/...i?id=53219 to the Debian package.



as you might have noticed Stefan was committing your patch upstream.
Thus, it might be included in upcoming releases for the 2.4 branch and
hence also in Debian. It may also be backported to the 2.2 series, but
chances are this comes too late for Wheezy.

I personally wouldn't mind to include it for Wheezy as a Debian patch,
but I'd let that up to Stefan to decide as there are some more changes
in trunk which could be included into Wheezy if we're freezing before
2.2.23 is released.

Maybe it is possible to get this even in Squeeze as it doesn't
change any default setting?



I don't think so. Whether or not this is changing the default behavior,
it is still an invasive change we are not considering for a stable release.


with kind regards,
Arno Töll
IRC: daemonkeeper on Freenode/OFTC
GnuPG Key-ID: 0x9D80F36D







To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact

Similar topics