With the advent of easy, free Let's Encrypt certs and IE8 not being a problem anymore, I'm planning on enabling SSL on an Apache server with thousands of host names. Does Apache scale? Switching Apache to something else is not an option at this point.
My first tests indicate that service apache restart
and actually serving pages are quick with a few thousand of self-created certs and their intermediates.
Are there some caveats I should be aware of? I'm worried that a possible scaling bottleneck would only come in actual production, when it's a bit late to roll-back to a "no, we don't have such certs" situation.
PS. Are there no shortcuts to generating a conf file with a list of <VirtualHost>
... CertificateFile
(besides mod_macro
)? I'm thinking of something like a "Just find all the certs in /etc/letsencrypt/live/
" directive.