eclipse-vertx / eclipse-vertx/vert.x
OCSP Stapling (for improving HTTPS effective throughput and allow scalability)
- Dominant language
- Java
- Stars
- 14.7k
- Forks
- 2.1k
- Avg merge
- 2d 7h
- Merged PRs (30d)
- 28
Description
> Cross posted on: https://github.com/netty/netty/issues/5943
>
> Please read this article:
> https://letsencrypt.org/2016/10/24/squarespace-ocsp-impl.html
>
> Please focus on:
>
> > Our extension is a standalone library but we could equally well fold it into the netty-tcnative library itself. If there is interest, we can contribute it upstream as part of Netty’s next API-breaking development cycle.
>
> hoping you'll show that there's interest!
Anyway it think in any case vert.x should wrap this feature ( once it's ready ) in the HttpServer implementation for this reason I'm opening a ticket also here...
And I hope also, that even if Netty will not show interest, VertX can do that, and embed that implementation itself...
It can reduce the ssl performance bottleneck that still require me to use nginx reverse proxy in front of some VertX as you know that even with tncnative we're not as good as nginx on https, maybe most of the bottleneck it's due to the missing ocsp stapling support, and it may be also a visibility opportunity for this project itself as letsencrypt can feature it too.
**It's reactive!**
My 2 cents
Contributor guide
Assessment
This issue has not been assessed yet.