Hey
some things are not clear for my.
We are developing a site for only authenticated users.
SSL will be forced on this project.
Actually we have not forced the SSL use on the project, because we are in development.

If we force SSL use now, does it impact the site performance?
I know the SSL handshake is a little bit longer for request. Anything more?
Is BOA caching SSL pages?

would be great to have more informations, because we are expecting 100 or more concurrent authenticated users.
I know server hardware must be good (actually a Core i7, 32 GB RAM, 500GB RAID5).

Comments

omega8cc’s picture

Status: Active » Closed (works as designed)

Using SSL only will make everything slower for sure. As for the BOA part, it will still use Redis, but SpeedBooster cache will be limited to 1 second only, just to protect from DoS attempts: http://drupalcode.org/project/barracuda.git/blob/HEAD:/aegir/conf/global... - note that it will work as expected only when $_SERVER['HTTP_X_LOCAL_PROXY'] is set, so when SSL how-to is used properly.