1047485 - HTTPS sites slow when SPDY proxy in use (no CONNECT involved)

Status: RESOLVED DUPLICATE of bug 1079484

(Core :: Networking: HTTP, defect)

Description

[James Willcox (:snorp) ([e-mail]) (he/him)]

When using Firefox with Janus, I've noticed that browsing HTTPS sites becomes glacially slow, even though the proxy PAC is configured to send HTTPS traffic "DIRECT". Disengaging the proxy makes everything snappy again.

Comment 1

[Eugen Sawin [:esawin]]

I can confirm this when running any Firefox version with SPDY proxy support on Linux (Ubuntu 14.04 64 bit).

The following PAC is used:

function FindProxyForURL(url, host) {
  if (url.substring(0, 6) == "https:") {
    return "DIRECT";
  } else {
    return "HTTPS janus.allizom.org:44300";
  }
}

Comment 2

[Eugen Sawin [:esawin]]

I'm not sure if it's related, but when opening https://github.com with the PAC configuration from the previous comment through the proxy, the proxy receives `HTTPS/1.1 CONNECT ocsp.digicert.com` requests, which should go directly instead.

Comment 3

[Patrick McManus [:mcmanus]]

if you set security.OCSP.enabled to 0 does it work better?

Comment 4

[Patrick McManus [:mcmanus]]

(In reply to Eugen Sawin [:esawin] from comment #2)
> I'm not sure if it's related, but when opening https://github.com with the
> PAC configuration from the previous comment through the proxy, the proxy
> receives `HTTPS/1.1 CONNECT ocsp.digicert.com` requests, which should go
> directly instead.

Those should actually be proxied - the ocsp is http://

the use of CONNECT is weird though :) I'll look at it.

I think the OCSP transactions are marked as no-spdy and that is probably causing an issue.

Comment 5

[Eugen Sawin [:esawin]]

Surfing with OCSP disabled doesn't give me slowdowns yet, will continue testing.

Comment 6

[Patrick McManus [:mcmanus]]

probly a dup of 1079484 :esawin retest?

Comment 7

[Eugen Sawin [:esawin]]

No Slowdowns yet, I'll keep testing and report back here (or re-open, should you want to dupe it).