<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>
<div>Oh, the problem isn’t the handshake, it’s that the device takes a lot longer to respond to the RefreshObject if it’s SSL. I’ll ask our engineering guys to take a look. I suspect that the gateways don’t do SSL offloading, so the 2048 bit stuff is just killing
it.</div>
<div><br>
</div>
<div>
<div>
<div>-- </div>
<div>Manny Veloso</div>
</div>
<div>Sr. Solutions Engineer</div>
<div>Smartrg.com</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Users <<a href="mailto:users-bounces@lists.genieacs.com">users-bounces@lists.genieacs.com</a>> on behalf of Zaid Abdulla <<a href="mailto:zaid@genieacs.com">zaid@genieacs.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>Community support for GenieACS users <<a href="mailto:users@lists.genieacs.com">users@lists.genieacs.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, August 12, 2015 at 4:38 PM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:users@lists.genieacs.com">users@lists.genieacs.com</a>" <<a href="mailto:users@lists.genieacs.com">users@lists.genieacs.com</a>><br>
<span style="font-weight:bold">Subject: </span>Re: GenieACS and SSL note<br>
</div>
<div><br>
</div>
<div>
<title></title>
<div>
<div>On Thu, Aug 13, 2015, at 01:58 AM, Manny Veloso wrote:<br>
</div>
<blockquote type="cite">
<div>
<div>
<div>Yep, we tried it with and without SSL. The delay in the response from the CPE averaged around 55 seconds over SSL, which must be SSL overhead. I guess it’s easy to forget that these don’t have a lot of CPU on them.<br>
</div>
</div>
</div>
</blockquote>
<div> </div>
<div>I don't know much about the topic but 55 seconds sounds way too long for SSL handshake and encryption of a few KBs even for a very limited hardware.<br>
</div>
<div> </div>
<div>It could be that limited memory causing this delay for large responses due to use of swap space. If you're only seeing this much delay when refreshing the entire parameter tree of the device, then try setting the config option "GET_PARAMETER_NAMES_DEPTH_THRESHOLD"
to, say, 3 or 4 to make the ACS fetch the parameter tree in iterations rather than all at once so you end up with smaller responses.<br>
</div>
<div> </div>
<div>Zaid<br>
</div>
</div>
</div>
</span>
</body>
</html>