Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 37 additions & 1 deletion index.html
Original file line number Diff line number Diff line change
Expand Up @@ -131,7 +131,7 @@ <h5>High Performance Browser Networking</h5>
<div class="row">
<div class="large-12 columns">
<h3 id="server-performance"><a href="#server-performance">Server performance</a></h3>
<p>TLS exposes many different knobs and new config flags on every server. Our goal here is not to provide an exhaustive list (consult server docs for that), but to highlight status of important performance-oriented features: resumption, stapling, false start (requires ALPN and forward secrecy), and support for the HTTP/2 protocol.</p>
<p>TLS exposes many different knobs and new config flags on every server. Our goal here is not to provide an exhaustive list (consult server docs for that), but to highlight status of important performance-oriented features: resumption, stapling, false start (requires ALPN and forward secrecy), and support for the HTTP/2 and HTTP/3 protocols.</p>

<table class="cf">
<thead>
Expand All @@ -144,6 +144,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<th>ALPN</th>
<th>Forward secrecy</th>
<th>HTTP/2</th>
<th>HTTP/3</th>
<th>TLS 1.3</th>
<th>TLS 1.3 <nobr>0-RTT</nobr></th>
</tr>
Expand All @@ -158,6 +159,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://httpd.apache.org/docs/trunk/mod/mod_ssl.html#sslalpnpreference">yes</a></td>
<td class="ok"><a href="https://wiki.mozilla.org/Security/Server_Side_TLS#Apache">yes</a></td>
<td class="ok"><a href="https://httpd.apache.org/docs/trunk/mod/mod_http2.html">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslciphersuite">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -170,6 +172,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="http://mail-archives.us.apache.org/mod_mbox/www-announce/201206.mbox/%3C4FE245C6.6060900@apache.org%3E">yes</a></td>
<td class="ok"><a href="https://issues.apache.org/jira/browse/TS-2372">yes</a></td>
<td class="ok"><a href="https://docs.trafficserver.apache.org/en/latest/admin-guide/files/records.config.en.html#http-2-configuration">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://cwiki.apache.org/confluence/display/TS/What%27s+New+in+v8.0.x">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -182,6 +185,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://caddyserver.com/docs/tls#summary">yes</a></td>
<td class="ok"><a href="https://caddyserver.com/docs/tls#summary">yes</a></td>
<td class="ok"><a href="https://caddyserver.com/docs/tls#summary">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://caddyserver.com/docs/tls#protocols">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -194,6 +198,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://support.f5.com/kb/en-us/products/big-ip-aam/manuals/product/aam-concepts-11-6-0/15.html">yes</a></td>
<td class="ok"><a href="https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13163.html">yes</a></td>
<td class="ok"><a href="https://support.f5.com/kb/en-us/products/big-ip-aam/manuals/product/aam-concepts-11-6-0/15.html">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/product/relnote-bigip-14-1-0.html#rn_ltm-tmos_14101_new">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -206,6 +211,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok">yes</td>
<td class="ok"><a href="https://h2o.examp1e.net/configure/base_directives.html#ssl-session-resumption-ticket-based">yes</a></td>
<td class="ok"><a href="https://h2o.examp1e.net/configure/http2_directives.html">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://github.com/h2o/h2o/releases/tag/v2.2.0">yes</a></td>
<td class="ok"><a href="https://github.com/h2o/h2o/releases/tag/v2.2.0">yes</td>
</tr>
Expand All @@ -218,6 +224,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://cbonte.github.io/haproxy-dconv/configuration-1.5.html#5.1-alpn">yes</a></td>
<td class="ok"><a href="https://wiki.mozilla.org/Security/Server_Side_TLS#Haproxy">yes</a></td>
<td class="ok"><a href="https://cbonte.github.io/haproxy-dconv/1.8/configuration.html#1.1">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://cbonte.github.io/haproxy-dconv/1.8/configuration.html#5.1-ssl-max-ver">yes</a></td>
<td class="ok"><a href="https://cbonte.github.io/haproxy-dconv/1.8/configuration.html#5.1-allow-0rtt">yes</a></td>
</tr>
Expand All @@ -230,6 +237,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://github.com/varnish/hitch/blob/master/docs/configuration.md#alpnnpn-support">yes</a></td>
<td class="ok">yes</td>
<td class=warn><a href="https://github.com/varnish/hitch/blob/master/CHANGES.rst#hitch-140-beta1-2016-08-26">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://github.com/varnish/hitch/blob/master/CHANGES.rst#hitch-150-2018-12-17">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -244,6 +252,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://blogs.iis.net/nazim/http-2-for-iis-in-windows-10-technical-preview">yes</a></td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td><a href="https://www.citrix.com/products/citrix-adc/?posit=glnav">Citrix ADC</a></td>
Expand All @@ -254,6 +263,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok">yes</td>
<td class="ok"><a href="https://docs.citrix.com/en-us/netscaler/12/ssl/ciphers-available-on-the-citrix-ADC-appliances/diffie-hellman-key-generation-and-achieving-pfs-with-dhe.html">yes</a></td>
<td class="ok"><a href="https://docs.citrix.com/en-us/netscaler/12/system/http-configurations/configuring-http2.html">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://www.citrix.com/blogs/2018/09/11/citrix-announces-adc-support-for-tls-1-3/">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -266,6 +276,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok">yes</td>
<td class="ok"><a href="https://wiki.mozilla.org/Security/Server_Side_TLS#Nginx">yes</a></td>
<td class="ok"><a href="https://www.nginx.com/blog/early-alpha-patch-http2/">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://twitter.com/nginxorg/status/856896480497385473">yes</a></td>
<td class="ok"><a href="https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_early_data">yes</a></td>
</tr>
Expand All @@ -278,6 +289,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://nodejs.org/api/tls.html#tls_event_secureconnection">yes</a></td>
<td class="ok"><a href="https://nodejs.org/api/tls.html#tls_perfect_forward_secrecy">yes</a></td>
<td class="ok"><a href="https://nodejs.org/dist/latest-v12.x/docs/api/http2.html">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md#2019-04-23-version-1200-current-bethgriggs">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -290,6 +302,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://golang.org/pkg/crypto/tls/#Config">yes</a></td>
<td class="ok"><a href="https://golang.org/pkg/crypto/tls/#Config">yes</a></td>
<td class="ok"><a href="https://golang.org/doc/go1.6#http2">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://golang.org/doc/go1.12#tls_1_3">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -302,6 +315,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--npn-list">yes</a></td>
<td class="ok"><a href="https://nghttp2.org/documentation/nghttpx.1.html#cmdoption-nghttpx--ciphers">yes</a></td>
<td class="ok"><a href="https://nghttp2.org/documentation/nghttpx.1.html#http-2-and-spdy">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://nghttp2.org/blog/2018/10/04/nghttp2-v1-34-0/">yes</a></td>
<td class="ok"><a href="https://nghttp2.org/blog/2018/10/04/nghttp2-v1-34-0/">yes</a></td>
</tr>
Expand All @@ -314,6 +328,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://www.pulsesecure.net/download/techpubs/current/1027/Pulse-vADC-Solutions/Pulse-Virtual-Traffic-Manager/17.4/ps-vtm-17.4-userguide.pdf#page=175">yes</a></td>
<td class="ok"><a href="https://www.pulsesecure.net/download/techpubs/current/1027/Pulse-vADC-Solutions/Pulse-Virtual-Traffic-Manager/17.4/ps-vtm-17.4-userguide.pdf#page=219">yes</a></td>
<td class="ok"><a href="https://www.pulsesecure.net/download/techpubs/current/1027/Pulse-vADC-Solutions/Pulse-Virtual-Traffic-Manager/17.4/ps-vtm-17.4-userguide.pdf#page=175">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://www.pulsesecure.net/download/techpubs/current/1441/Pulse-vADC-Solutions/Pulse-Virtual-Traffic-Manager/18.3/ps-vtm-18.3-userguide.pdf#page=226">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -328,6 +343,7 @@ <h3 id="server-performance"><a href="#server-performance">Server performance</a>
<td class="ok"><a href="https://www.shimmercat.com/en/docs/1.5/featureset/#protocol-support">yes</a></td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
</tbody>
</table>
Expand All @@ -354,6 +370,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<th>ALPN</th>
<th>Forward secrecy</th>
<th>HTTP/2</th>
<th>HTTP/3</th>
<th>TLS 1.3</th>
<th>TLS 1.3 <nobr>0-RTT</nobr></th>
</tr>
Expand All @@ -368,6 +385,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok">yes</td>
<td class="ok">yes</td>
<td class="ok"><a href="https://http2.akamai.com/">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://community.akamai.com/customers/s/article/Get-ready-for-TLS-1-3">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -382,6 +400,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>AWS ELB (Application)</td>
Expand All @@ -394,6 +413,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok"><a href="https://aws.amazon.com/blogs/aws/new-aws-application-load-balancer/">yes</a></td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>AWS CloudFront</td>
Expand All @@ -406,6 +426,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok"><a href="https://aws.amazon.com/about-aws/whats-new/2016/09/amazon-cloudfront-now-supports-http2/">yes</a></td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>BelugaCDN</td>
Expand All @@ -418,6 +439,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok"><a href="https://docs.belugacdn.com/docs/ssl-certificates">yes</a></td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>CDN77</td>
Expand All @@ -428,6 +450,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok"><a href="https://client.cdn77.com/support/knowledgebase/general-faq/ssl-tech-specs">yes</a></td>
<td class="ok"><a href="https://client.cdn77.com/support/knowledgebase/general-faq/ssl-tech-specs">yes</a></td>
<td class="ok"><a href="https://www.cdn77.com/http2">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://www.cdn77.com/blog/latest-tls-improving-https/">yes</a></td>
<td class="ok"><a href="https://www.cdn77.com/blog/latest-tls-improving-https/">yes</a></td>
</tr>
Expand All @@ -440,6 +463,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok">yes</td>
<td class="ok">yes</td>
<td class="ok"><a href="https://blog.cloudflare.com/introducing-http2/">yes</a></td>
<td class="alert"><a href="https://blog.cloudflare.com/http3-the-past-present-and-future/">no</a></td>
<td class="ok"><a href="https://blog.cloudflare.com/introducing-tls-1-3/">yes</a></td>
<td class="ok"><a href="https://blog.cloudflare.com/introducing-0-rtt/">yes</a></td>
</tr>
Expand All @@ -454,6 +478,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>EdgeCast</td>
Expand All @@ -464,6 +489,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok">yes</td>
<td class="ok">yes</td>
<td class="ok"><a href="https://www.verizondigitalmedia.com/blog/2017/04/http2-done-right/">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://www.verizondigitalmedia.com/blog/2018/12/tls-13-making-the-internet-faster-and-safer/">yes</a></td>
<td class="alert">no</td>
</tr>
Expand All @@ -478,6 +504,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok"><a href="https://www.fastly.com/blog/http2-now-general-availability">yes</a></td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>Google App Engine</td>
Expand All @@ -490,6 +517,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok">yes</td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>Heroku</td>
Expand All @@ -502,6 +530,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>Imperva Incapsula</td>
Expand All @@ -514,6 +543,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok"><a href="https://www.incapsula.com/blog/http2-is-here-what-you-need-to-know.html">yes</a></td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>Instart</td>
Expand All @@ -524,6 +554,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok">yes</td>
<td class="ok">yes</td>
<td class="ok"><a href="https://www.instartlogic.com/blog/upgrading-http2">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://www.instart.com/blog/may-2019-new-instart-features">yes</a></td>
<td class="ok"><a href="https://www.instart.com/blog/may-2019-new-instart-features">yes</a></td>
</tr>
Expand All @@ -536,6 +567,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok">yes</td>
<td class="ok">yes</td>
<td class="ok"><a href="https://www.keycdn.com/blog/keycdn-http2-support/">yes</a></td>
<td class="alert">no</td>
<td class="ok"><a href="https://www.keycdn.com/blog/tls-1-3-support/">yes</a></td>
<td class="ok"><a href="https://www.keycdn.com/blog/tls-1-3-support/">yes</a></td>
</tr>
Expand All @@ -550,6 +582,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok"><a href="https://www.limelight.com/orchestrate-platform/">yes</a></td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
<tr>
<td>StackPath</td>
Expand All @@ -560,6 +593,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok">yes</td>
<td class="ok">yes</td>
<td class="ok"><a href="https://www.maxcdn.com/blog/http2-support/">yes</a></td>
<td class="alert">no</td>
<td class="ok">yes</td>
<td class="alert">no</td>
</tr>
Expand All @@ -572,6 +606,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="ok">yes</td>
<td class="ok">yes</td>
<td class="ok"><a href="https://www.netlify.com/blog/2015/10/20/netlify-news-no.-6/">yes</a></td>
<td class="alert">no</td>
<td class="ok">yes</td>
<td class="alert">no</td>
</tr>
Expand All @@ -586,6 +621,7 @@ <h3 id="cdn-paas"><a href="#cdn-paas">CDN &amp; PaaS performance</a></h3>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
<td class="alert">no</td>
</tr>
</tbody>
</table>
Expand Down