TLS session reuse

Question

TLS session reuse

duijf opened this issue 7 years ago · comments

Laurens Duijvesteijn commented 7 years ago

From looking at OpenSSL output, vaultenv doesn't currently seem to re-use TLS sessions. Doing this would be a performance improvement, especially on the server side. (Go TLS is quite slow golang/go#20058)

Arian van Putten · Answer 1 · Fri Feb 16 2018 00:54:17 GMT+0800 (China Standard Time)

The underlying tls package has a concept of a SessionManager exactly for this:

https://hackage.haskell.org/package/tls-session-manager
https://hackage.haskell.org/package/tls-1.4.0/docs/Network-TLS.html#t:SessionManager

Laurens Duijvesteijn · Answer 2 · Mon Feb 19 2018 21:50:06 GMT+0800 (China Standard Time)

I opened an issue on the connection package because the docs were a bit confusing.

I think we should experiment with the tls-session-manager package to see if we can get it to work.

Ruud van Asseldonk · Answer 3 · Thu Sep 26 2019 19:29:25 GMT+0800 (China Standard Time)

There has been no progress on vincenthz/hs-connection#32 for a long time. If we want this, perhaps we should look into binding libcurl instead.