Comments on: ISA Server and slow SSL http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/ So much tech, so little time... Tue, 06 Jan 2009 01:45:28 +0000 http://wordpress.org/?v=2.3.3 By: Steven http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1918 Steven Thu, 14 Jul 2005 20:36:14 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1918 Jacks, in your ISA console, under Server Name -> Configuration -> General, there should be an icon for "Define Connection Limits". Click there to configuration your connection limits and timeouts. Jacks, in your ISA console, under Server Name -> Configuration -> General, there should be an icon for “Define Connection Limits”. Click there to configuration your connection limits and timeouts.

]]> By: Jacks http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1917 Jacks Thu, 14 Jul 2005 18:47:06 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1917 Where do you change the timeout setting? Where do you change the timeout setting?

]]> By: Edwin http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1912 Edwin Fri, 01 Jul 2005 15:07:50 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1912 I'm running MS Proxy 2.0 having the same slow SSL connections. Some sites however after a while are running much faster, without a single change in the configuration. In the netherlands two sites to try are: https://secure.postplaza.nl/tracktrace/ and https://www.p3.postbank.nl/sesam/SesamLoginServlet. I acuse the webhosting side of the connection of having some settings not in order. I suppose on some SSL servers there are settings for redirected SSL traffic. I’m running MS Proxy 2.0 having the same slow SSL connections. Some sites however after a while are running much faster, without a single change in the configuration. In the netherlands two sites to try are: https://secure.postplaza.nl/tracktrace/ and https://www.p3.postbank.nl/sesam/SesamLoginServlet.

I acuse the webhosting side of the connection of having some settings not in order.
I suppose on some SSL servers there are settings for redirected SSL traffic.

]]> By: snow white http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1910 snow white Tue, 28 Jun 2005 14:37:29 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1910 Darn its seems to be a client (ie) issue as well, my XP workstation (sp2) works almost fine. But all client workstations (2k sp4, ie 6sp1) still give problems. Wtf has M$ done, Again! Darn its seems to be a client (ie) issue as well, my XP workstation (sp2) works almost fine. But all client workstations (2k sp4, ie 6sp1) still give problems. Wtf has M$ done, Again!

]]> By: snow white http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1909 snow white Tue, 28 Jun 2005 09:58:38 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1909 Cool finally i have more to go on, it partly solved my problems as well requarding one website that was soooo sloooow. I use the word partly because the website is now browse able, but still slow. Using a direct connection gives a good comparisons in what ISA 2004 is doing whit my speed. Im rather disappointed of some bad "features" of the product and the low flexibility of the configuration options rules ed. Are there more tricks to boost the speed up as u know of? Cool finally i have more to go on, it partly solved my problems as well requarding one website that was soooo sloooow.

I use the word partly because the website is now browse able, but still slow. Using a direct connection gives a good comparisons in what ISA 2004 is doing whit my speed. Im rather disappointed of some bad “features” of the product and the low flexibility of the configuration options rules ed.

Are there more tricks to boost the speed up as u know of?

]]> By: Proxy4NT http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1908 Proxy4NT Mon, 27 Jun 2005 07:10:57 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1908 Hm.. we did not have a limitation for connections and the time is 120 seconds, so I am not sure if this what we see is the same like yours. You will see open connections from clients because HTTP/1.1 is used and it will have keep alive the connection for a faster re-usage for the next. You will find informations about this at http://www.faqs.org/rfcs/rfc2616.html section 8.1.3 Proxy Servers. Hm.. we did not have a limitation for connections and the time is 120 seconds, so I am not sure if this what we see is the same like yours.
You will see open connections from clients because HTTP/1.1 is used
and it will have keep alive the connection for a faster re-usage for the next.
You will find informations about this at http://www.faqs.org/rfcs/rfc2616.html section 8.1.3 Proxy Servers.

]]> By: Steven http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1907 Steven Wed, 22 Jun 2005 10:51:21 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1907 No, we didn't need to chnage the retransmit value in the registry, because our connections weren't timing out, they were being deined by the ISA Server. ISA Server is significantly different from Proxy Server, and I believe ISA Server controls TCP/IP retransmits on its own. No, we didn’t need to chnage the retransmit value in the registry, because our connections weren’t timing out, they were being deined by the ISA Server. ISA Server is significantly different from Proxy Server, and I believe ISA Server controls TCP/IP retransmits on its own.

]]> By: Proxy4NT http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1906 Proxy4NT Tue, 21 Jun 2005 10:34:18 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1906 Did you deal with the TcpMaxDataRetransmissions TCP/IP Value? At my box the connection limit is set to unlimited and the time out is set to 120 in the internal networks object web proxy tab under advanced. There was an article http://support.microsoft.com/default.aspx?scid=kb;en-us;191143 for the older Proxy Servers but the problem is still the same. We use only plain web proxy feature without having the firewall client installed. See you... Did you deal with the TcpMaxDataRetransmissions TCP/IP Value?
At my box the connection limit is set to unlimited and the time out is set to 120 in the internal networks object web proxy tab under advanced.
There was an article http://support.microsoft.com/default.aspx?scid=kb;en-us;191143 for the older Proxy Servers but the problem is
still the same. We use only plain web proxy feature without having the firewall client installed.

See you…

]]> By: Steven http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1905 Steven Mon, 20 Jun 2005 14:11:02 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1905 The above solution is for ISA Server 2004, which doesn't have an Outgoing Web Request listener. I assume you're talking about ISA Server 2000. I haven't run ISA Server 2000 for about a year, and I hadn't solved this problem when I was running ISA 2000, so I'm not certain where you would find the client connection limits. Note that this problem on ISA 2004 stemmed from ALL client connections to the server being limited, not just outgoing web requests. I don't know if ISA 2000 even has such a feature. The above solution is for ISA Server 2004, which doesn’t have an Outgoing Web Request listener. I assume you’re talking about ISA Server 2000. I haven’t run ISA Server 2000 for about a year, and I hadn’t solved this problem when I was running ISA 2000, so I’m not certain where you would find the client connection limits. Note that this problem on ISA 2004 stemmed from ALL client connections to the server being limited, not just outgoing web requests. I don’t know if ISA 2000 even has such a feature.

]]> By: Jazman http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1904 Jazman Fri, 17 Jun 2005 05:53:20 +0000 http://www.mrchuckles.net/2005/04/21/isa-server-and-slow-ssl/#comment-1904 Sorry to be dumb.But are you talking about the settings under outgoing web requests? Sorry to be dumb.But are you talking about the settings under outgoing web requests?

]]>