eclipse-vertx / eclipse-vertx/vert.x

OCSP Stapling (for improving HTTPS effective throughput and allow scalability)

Open
#1,689 18 comments 3 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
14.7k
Forks
2.1k
Avg merge
2d 7h
Merged PRs (30d)
28

Description

> Cross posted on: https://github.com/netty/netty/issues/5943
>
> Please read this article:
> https://letsencrypt.org/2016/10/24/squarespace-ocsp-impl.html
>
> Please focus on:
>
> > Our extension is a standalone library but we could equally well fold it into the netty-tcnative library itself. If there is interest, we can contribute it upstream as part of Netty’s next API-breaking development cycle.
>
> hoping you'll show that there's interest!

Anyway it think in any case vert.x should wrap this feature ( once it's ready ) in the HttpServer implementation for this reason I'm opening a ticket also here...

And I hope also, that even if Netty will not show interest, VertX can do that, and embed that implementation itself...

It can reduce the ssl performance bottleneck that still require me to use nginx reverse proxy in front of some VertX as you know that even with tncnative we're not as good as nginx on https, maybe most of the bottleneck it's due to the missing ocsp stapling support, and it may be also a visibility opportunity for this project itself as letsencrypt can feature it too.

**It's reactive!**

My 2 cents

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.