{"id":373583,"date":"2021-02-20T22:43:24","date_gmt":"2021-02-20T14:43:24","guid":{"rendered":"http:\/\/4563.org\/?p=373583"},"modified":"2021-02-20T22:43:24","modified_gmt":"2021-02-20T14:43:24","slug":"%e8%af%b7%e9%97%ae%e4%b8%80%e8%88%ac%e5%bc%80%e5%90%af-https-%e5%bb%b6%e8%bf%9f%e5%a2%9e%e5%8a%a0%e5%a4%9a%e5%b0%91%e6%ad%a3%e5%b8%b8%ef%bc%9f","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=373583","title":{"rendered":"\u8bf7\u95ee\u4e00\u822c\u5f00\u542f HTTPS \u5ef6\u8fdf\u589e\u52a0\u591a\u5c11\u6b63\u5e38\uff1f"},"content":{"rendered":"
\n
\n
\n

\u8bf7\u95ee\u4e00\u822c\u5f00\u542f HTTPS \u5ef6\u8fdf\u589e\u52a0\u591a\u5c11\u6b63\u5e38\uff1f <\/h1>\n

<\/p>\n

\n
\u8cc7\u6df1\u5927\u4f6c : Phishion <\/span> <\/i> 5<\/span> <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
<\/p>\n

\u73b0\u5728\u673a\u5668\u65e0\u8d1f\u8f7d\uff0c\u8bbf\u95ee\u76f8\u540c\u63a5\u53e3\uff0chttp \u65b9\u5f0f\u4e3a 60ms \uff5e 80ms\uff0chttps \u65b9\u5f0f 140ms \uff5e 160ms\uff0c\u6211\u4e2a\u4eba\u89c9\u5f97\u6027\u80fd\u4e0b\u964d\u633a\u5389\u5bb3\u7684\uff0c\u8fd9\u6837\u7b97\u662f\u6b63\u5e38\u6c34\u5e73\u4e48\uff1f\u8fd8\u662f\u6709\u4e00\u4e9b\u4f18\u5316\u6211\u6ca1\u505a\u7684\uff1f<\/p>\n

\u9488\u5bf9 SSL \u6211\u7528\u4e86\u4ee5\u4e0b\u4f18\u5316<\/p>\n

    \n
  • \u5f00\u542f\u4e86 http2<\/li>\n
  • \u5f00\u542f\u4e86 ssl_stapling \uff08 OCSP Stapling \uff09<\/li>\n
  • \u5f00\u542f\u4e86 ssl_prefer_server_ciphers<\/li>\n<\/ul>\n

    \u4f46\u662f\u611f\u89c9\u4f5c\u7528\u90fd\u4e0d\u662f\u5f88\u660e\u663e\uff0c\u5404\u4f4d\u5927\u4f6c\u53ef\u4ee5\u544a\u77e5\u4e00\u4e0b\u65b9\u5411\u4e48\uff1f<\/p>\n<\/p><\/div>\n

    \u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (18<\/span>) <\/div>\n
    <\/div>\n<\/p><\/div>\n<\/p><\/div>\n
      \n
    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : dzdh <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      win? linux? <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : Phishion <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @dzdh linux <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : keyfunc <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      \u5f00\u542f HTTPS \u540e\u5ba2\u6237\u7aef\u4e0e\u670d\u52a1\u5668\u7b2c\u4e00\u6b21\u901a\u8baf\u4f1a\u589e\u52a0\u5ef6\u8fdf\u7684\uff0c\u5177\u4f53\u591a\u5c11\u4e0d\u597d\u8bf4\uff0c\u4f46\u5355\u72ec\u6d4b\u4e00\u6b21\u8bbf\u95ee\u7684\u5ef6\u8fdf\u5176\u5b9e\u6ca1\u592a\u5927\u610f\u4e49\uff0c\u52a0\u70b9\u5e76\u53d1\u548c\u591a\u6b21\u8bbf\u95ee\uff0c\u770b\u770b\u6548\u679c\uff0cH2 \u7684\u7279\u5f81\u5bf9\u6027\u80fd\u63d0\u5347\u6548\u679c\u542c\u660e\u663e\u7684\u3002 <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : Phishion <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @keyfunc \u6211\u7528 postman \u8fde\u7eed\u70b9\u51fb\u7684 send\uff0c\u5ef6\u8fdf\u5c31\u662f\u4e0a\u9762\u7684\u5ef6\u8fdf\uff0c\u8fd8\u662f\u8bf4\u6211\u6bcf\u6b21 \u70b9\u51fb send \u90fd\u7b97\u5355\u72ec\u7684\u4e00\u6b21\u8bbf\u95ee\uff1f <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : Zhuzhuchenyan <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      \u53ef\u4ee5\u770b\u4e00\u4e0b\u76f4\u63a5 ping \u673a\u5668\u7684\u5ef6\u8fdf\u662f\u591a\u5c11\uff0c\u6216\u8005 tcp ping \u4e00\u4e0b\u4e86\u89e3\u4e00\u4e0b\u5e73\u5747 RTT \u662f\u591a\u5c11\uff0c\u5f00\u542f HTTPS \u52a0\u5bc6\u5e26\u6765\u7684\u6027\u80fd\u635f\u5931\u548c\u7f51\u7edc\u5ef6\u8fdf\u76f8\u6bd4\u53ef\u4ee5\u5148\u5ffd\u7565<\/p>\n

      HTTP \u7406\u60f3\u60c5\u51b5\u4e0b\u53ea\u9700\u8981\u4e00\u6b21 RTT \u7684\u65f6\u95f4\u5c31\u53ef\u4ee5\u53d1\u9001\u6570\u636e\uff0c
      HTTPS \u7406\u60f3\u60c5\u51b5\u4e0b\u5219\u591a\u5f97\u591a\uff0cTLS1.2 \u9700\u8981 4 \u4e2a RTT \u65f6\u95f4\uff0cTLS1.3 \u9700\u8981 3 \u4e2a RTT \u65f6\u95f4\u3002<\/p>\n

      \u6240\u4ee5\u5982\u679c\u672c\u8eab\u5ef6\u8fdf\u5c31\u5f88\u9ad8\uff0c\u90a3\u4e48\u5f00\u542f HTTPS \u5e26\u6765\u7684\u5ef6\u8fdf\u589e\u957f\u7684\u786e\u4e5f\u4f1a\u5f88\u9ad8\u3002<\/p>\n

      \u662f\u5426\u5f00\u542f HTTP2 \u5bf9\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\u6ca1\u5565\u5e2e\u52a9\uff0c\u4f46\u662f\u5bf9\u4e8e\u7f51\u7ad9\u7684\u57fa\u51c6\u6027\u80fd\u4f1a\u6709\u6bd4\u8f83\u5927\u7684\u63d0\u5347\u3002
      ssl_prefer_server_ciphers \u8fd9\u4e2a\u9009\u9879\u53ea\u662f\u63a8\u8350\u5ba2\u6237\u7aef\u9009\u5b9a\u4f60\u6307\u5b9a\u7684 cipher\uff0c\u6bd5\u7adf\u67d0\u4e9b cipher \u8fc7\u65f6\uff0c\u6162\uff0c\u5e76\u4e14\u6709\u53ef\u80fd\u4e0d\u5b89\u5168
      \u5982\u679c\u4f60\u7684\u8bc1\u4e66\u7684 OCSP \u670d\u52a1\u5668\u6ca1\u6709\u88ab\u5899\uff0c\u90a3\u4e48\u662f\u5426\u5f00\u542f ssl_stapling \u5bf9\u8fd9\u4e2a\u95ee\u9898\u6ca1\u6709\u5e2e\u52a9\u3002<\/p>\n

      \u6211\u624d\u758f\u5b66\u6d45\uff0c\u552f\u4e00\u80fd\u5efa\u8bae\u7684\u662f\u5f00\u542f ssl session \u91cd\u7528\uff0cSSL-Session-Cache\uff0c\u8fd9\u4e2a\u80fd\u5e2e\u4f60\u8282\u7701 1 \u4e2a RTT \u7684\u65f6\u95f4\u3002 <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : watzds <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      \u7528\u957f\u8fde\u63a5\uff0c\u5426\u5219\u7f51\u7edc\u5ef6\u8fdf\u589e\u52a0\u4e24\u4e09\u500d\u5f88\u6b63\u5e38 <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : Phishion <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @Zhuzhuchenyan @watzds \u611f\u8c22\u90a3\u4e48\u665a\u56de\u590d\uff0c\u6211\u670d\u52a1\u5668\u5728\u67d0\u5927\u5382\u4e91\u7684\u9999\u6e2f\u670d\u52a1\u5668\uff0cping \u4e5f\u5c31 40ms \u5de6\u53f3\uff0c\u6211\u5728\u60f3\u603b\u4e0d\u80fd\u5f00\u542f https \u80fd\u589e\u52a0 90ms \u5ef6\u8fdf\uff0c\u8981\u4e48\u6211\u7684 postman \u70b9\u51fb\u6309\u94ae\u7684\u9a8c\u8bc1\u5ef6\u8fdf\u7684\u6d4b\u7b97\u65b9\u6cd5\u6709\u95ee\u9898\uff0c\u8981\u4e48\u5c31\u662f\u914d\u7f6e\u4e0a\u7684\u95ee\u9898\uff0c
      @watzds \u6211\u6293\u5305\u770b Header Connection: keep-alive \u90fd\u662f\u9ed8\u8ba4\u5f00\u542f\u7684 <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : Phishion <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @keyfunc
      @Zhuzhuchenyan
      @watzds <\/p>\n

      \u7ecf\u8fc7\u5b9e\u9a8c\uff0c\u6211\u53d1\u73b0**\u4e00\u4e2a curl \u547d\u4ee4\u8dd1\u591a\u4e2a\u94fe\u63a5**\u7684\u8bdd\uff0c\u53ea\u8981\u5728\u4e00\u4e2a\u4f1a\u8bdd\u91cc\u9762\uff0c\u5c31\u53ef\u4ee5\u7528 keep-alive \u957f\u8fde\u63a5\uff0c\u56e0\u6b64\u8dd1\u4e86 20 \u591a\u6761\u6570\u636e\u7684\u603b\u65f6\u95f4\u6362\u7b97\u4e00\u4e0b\u5ef6\u8fdf\u786e\u5b9e\u662f\u5ffd\u7565\u4e0d\u8ba1\u7684\uff0c\u4f46\u662f\u7528 postman \u70b9\u51fb\u53d1\u9001\u6216\u8005 **\u591a\u4e2a curl \u547d\u4ee4\uff0c\u6bcf\u4e2a curl \u8dd1 1 \u4e2a\u94fe\u63a5**\u7684\u8bdd\uff0c\u5c31\u6ca1\u6709\u7528\u5230 keep-alive\uff0c\u6bcf\u4e2a\u90fd\u662f\u5355\u72ec\u4f1a\u8bdd<\/p>\n

      \u56e0\u6b64\u6211\u731c\u60f3 ssl \u7b2c\u4e00\u6b21\u8bf7\u6c42\u90fd\u5f88\u6162\uff0c\u4f46\u662f\u5982\u679c\u662f\u957f\u8fde\u63a5\u4fdd\u6301\uff0c\u63a5\u4e0b\u6765\u7684\u8fde\u63a5\u5c31\u4e0d\u7528\u8ba1\u7b97\u8bc1\u4e66\u5408\u6cd5\u6027\u4e86\uff0c\u6240\u4ee5\u8fd8\u662f\u8981\u5728\u4e00\u4e2a\u4f1a\u8bdd\u91cc\u624d\u80fd\u770b\u51fa\u95ee\u9898\u3002<\/p>\n

      \u662f\u5426\u53ef\u4ee5\u8fd9\u6837\u7406\u89e3\uff1f <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : MeteorCat <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      \u6709\u6ca1\u6709\u5957 cdn \uff1f <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : lostberryzz <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      TTFB \u9700\u8981 4.5 \u4e2a RTT\uff0c\u4e5f\u5c31\u662f 9x \u5ef6\u8fdf <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : Phishion <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @MeteorCat \u5957\u4e86 cdn\uff0c\u4e0d\u8fc7\u6211\u672c\u5730\u4fee\u6539 hosts \u76f4\u8fde\u7684\u670d\u52a1\u5668\uff0c\u8ddf cdn \u6ca1\u5173\u7cfb\uff0ccdn \u5927\u6982\u4f1a\u5728\u539f\u6709\u5ef6\u8fdf\u6570\u5b57\u4e0a\u52a0 60ms \u5427 <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : unixeno <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @Phishion \u57fa\u672c\u6ca1\u5565\u95ee\u9898\uff0c\u5ef6\u8fdf\u7684\u589e\u52a0\u4e3b\u8981\u5c31\u662f ssl \u63e1\u624b\u4ea7\u751f\u7684\uff0c\u5982\u679c\u91cd\u7528\u8fde\u63a5\uff0c\u4e0d\u4ec5\u6ca1\u6709 ssl \u63e1\u624b\u7684\u5f00\u9500\uff0c\u4e5f\u6ca1\u6709 tcp \u63e1\u624b\u7684\u5f00\u9500
      \u4f60\u53ef\u4ee5\u8bd5\u4e00\u4e0b\u7528\u6d4f\u89c8\u5668\u7684\u5f00\u53d1\u8005\u5de5\u5177\uff0c\u91cc\u9762\u53ef\u4ee5\u770b\u5230\u6bcf\u4e2a\u8bf7\u6c42\u7684\u8fde\u63a5\u5efa\u7acb\u65f6\u95f4\u548c\u5b9e\u9645\u63a5\u6536\u6570\u636e\u7684\u65f6\u95f4\u4e4b\u7c7b\u7684\u6570\u636e <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : Phishion <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @MeteorCat
      @lostberryzz
      @unixeno <\/p>\n

      \u611f\u8c22\u8fd9\u4e48\u665a\u56de\u590d\uff0c\u6211\u8981\u7761\u4e86\uff0c\u4f60\u4eec\u4e5f\u65e9\u70b9\u7761\u5427\uff0c\u8c22\u8c22\u5404\u4f4d\u6307\u5bfc\uff01\uff01\uff01 <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : watzds <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @Phishion \u53e6\u5916 curl \u6d4b\u8bd5\u7684\u8bdd\u8fd8\u6709\u542f\u52a8\u65f6\u95f4\u5f00\u9500\uff0c\u6211\u4e00\u822c\u662f www.baidu.com test.com test.com <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : watzds <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @Phishion curl -X POST -w “ndns_resolution: %{time_namelookup}, tcp_established: %{time_connect}, ssl_handshake_done: %{time_appconnect}, TTFB: %{time_starttransfer}, total: %{time_total}n”\u00a0 -s “https:\/\/www.baidu.com” “https:\/\/test.com”\u00a0 “https:\/\/test.com” <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : louiswang002 <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @Phishion \u51e0\u4f4d\u5927\u4f6c\u89e3\u91ca\u7684\u5f88\u6e05\u695a\uff0chttp2 \u9ed8\u8ba4\u5f00\u542f keep-alive\uff0c\u8fd8\u53ef\u4ee5\u67e5\u4e00\u4e0b\u591a\u8def\u590d\u7528\u3002<\/p>\n

      \u4e5f\u53ef\u4ee5\u5c1d\u8bd5\u4e00\u4e0b http3\uff0c\u4f7f\u7528\u7684 quic \u534f\u8bae\uff0c0RTT\uff0c\u5728\u5efa\u7acb\u8fde\u63a5\u65f6\u6027\u80fd\u63d0\u5347\u4e0d\u5c11 <\/p><\/div>\n<\/p><\/div>\n<\/li>\n

    • \n
      \n
      \n
      \u8cc7\u6df1\u5927\u4f6c : zhuzhibin <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      ssl \u5f00\u9500\u633a\u5927\u7684 \u53ef\u4ee5\u505a\u4e2a\u538b\u6d4b\u5c31\u77e5\u9053\u4e86 <\/div>\n<\/p><\/div>\n<\/li>\n
    • \n
      \n
      \n
      \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : Phishion <\/span> <\/div>\n
      <\/i> <\/span> <\/div>\n<\/p><\/div>\n
      @watzds \u8fd9\u4e2a\u4e0d\u9519\uff0c\u6bd4\u6211\u7684\u6293\u5305\u76ee\u6d4b\u6e05\u695a\uff0c\u611f\u8c22\uff01<\/p>\n

      \u4e5f\u8c22\u8c22\u4f60\u4eec\u7684\u5efa\u8bae
      @louiswang002
      @zhuzhibin <\/div>\n<\/p><\/div>\n<\/li>\n

    • \n","protected":false},"excerpt":{"rendered":"

      \u8bf7\u95ee\u4e00\u822c\u5f00\u542f HTTPS \u5ef6\u8fdf\u589e\u52a0…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/373583"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=373583"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/373583\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=373583"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=373583"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=373583"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}