New Features in pixelserv-tls v2.1

The upcoming pixelserv-tls 2.1.0 brings a few exciting new features. They speed up browsing as well as enhancing a user's capability to inspect potential privacy breach. While this blog post highlights the features, supplemental details are also available as usual in the MAN page. Cache SSL certificates in…

Read this article

pixelserv-tls Found Unexpected Gmail Login Failure

I can't wait but jot down this piece of story. I woke up this morning and found macOS Mail.app failed to login Gmail. I tried re-login a few times. No success and I left it aside. In a cozy afternoon, I decided to revisit the issue. The first thing…

Read this article

pixelserv-tls v2.1 Scores A in Tests

pixelserv-tls v2.1 is imminent for release. I setup a special instance in my home lab and put it under scrutiny of SSL Labs tests. Test version 2.1.0-rc.2 pleasantly scores an overall A. Quite a few other things from the test report worth highlights. v2.1 brings…

Read this article

Optimised OpenSSL Library for ER-X

This article introduces an optimised build of OpenSSL 1.0.1te for EdgeRouter-X. It is tested in firmware v1.10 and shall work on models sharing the same ER-X platform. Note that this optimised library is not built for Cavium-based EdgeRouters and will not work on those models. Also worth…

Read this article

Run pixelserv-tls on EdgeRouter-X

This article introduces a Debian package pixelserv-tls for ER-X which as of firmware v1.10.0 runs a variant of Debian Wheezy. ER-X has four logical cores which are a huge advantage. pixelserv-tls can make use of as many cores as you throw at it. I believe the package can…

Read this article

pixelserv-tls v2 Benchmark

This is a quick update to the benchmark described in the previous article. The test procedures are revised as below: empty cache and reload each page five times. record DOMContentLoad, Load, and Finish time for each reload. Take the average. repeat for select_timeout equal to 1s, 5s and 10s.…

Read this article

pixelserv-tls : HTTP/1.1 Persistent Connections

This article discusses features and performance of pixelserv-tls, version KL. As of this writing a pre-release test version is used for analysis. The original pixelserv handles each request by fork()'ing a new process. It is an expensive operation on both CPU time and memory footprint. With pixelserv-tls version Ke,…

Read this article