Re: Server very delayed in sending SYN/ACK

2016-09-03 Thread Krishna Kumar (Engineering)
Hi Will, > * In the packet capture from the server, I see the SYN packet come in, then 3 more retransmits of that same syn come in before the server sent back the SYN/ACK. To me this indicates the issue in kernel or nginx side. Many times clients sends multiple SYN's. You can run wireshark to che

Server very delayed in sending SYN/ACK

2016-09-03 Thread Will Platnick
Hello, I have run into a very interesting issue. I am replacing a set of nginx reverse proxy servers with a new set running an updated OS/nginx. These nginx servers front a popular API that's mostly used by mobile apps, but also a website that's hosted on a nearby subnet. I put the new servers int

Multi Certificate Support with OCSP not working right

2016-09-03 Thread mastercan
Hello, When using 2 certificates, 1 RSA (using AlphaSSL) and 1 ECDSA (using Lets Encrypt), and I try to connect via RSA SSL connection, nginx throws this error: "OCSP response not successful (6: unauthorized) while requesting certificate status, responder: ocsp.int-x3.letsencrypt.org" So it is u