Hi,
I have trouble with the speeds of my nginx reverse proxy.
I am using an HP T620+ with Intel 4 Port NIC.
When i access my services directly (via IP:Port), i get Gbit Speeds.
BUT when I use the NGINX Reverse Proxy for SSL Offloading, I am limited at about 160mbit/s.
I tried to improve some settings regarding buffering and could increase the speed from initial 120mbit to 160mbit now.
According to the Dashboard, my CPU usage is around 50-80% while Downloading a large File (at 18MB/s).
Is this a common Problem or is the T620+ just too weak for SSL Offloading?
I am using EC 256 Bit Certificates by the way.
The slow part of TLS is the key exchange. This is CPU intense. The other part is only possible to accelerate if your hardware has acceleration like AES-NI.
Mhm.... The CPU does support AES-NI, which is why i was wondering about this performance.
But you do not have any hint for special configuration or something right?