Quantcast
Channel: User tuomassalo - Server Fault
Viewing all articles
Browse latest Browse all 19

How well does Apache 2.4 scale with lots of certificates?

$
0
0

With the advent of easy, free Let's Encrypt certs and IE8 not being a problem anymore, I'm planning on enabling SSL on an Apache server with thousands of host names. Does Apache scale? Switching Apache to something else is not an option at this point.

My first tests indicate that service apache restart and actually serving pages are quick with a few thousand of self-created certs and their intermediates.

Are there some caveats I should be aware of? I'm worried that a possible scaling bottleneck would only come in actual production, when it's a bit late to roll-back to a "no, we don't have such certs" situation.

PS. Are there no shortcuts to generating a conf file with a list of <VirtualHost> ... CertificateFile (besides mod_macro)? I'm thinking of something like a "Just find all the certs in /etc/letsencrypt/live/" directive.


Viewing all articles
Browse latest Browse all 19

Trending Articles





<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>