2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2...

43
HTTP/2 Pros and Cons Nick Shadrin / NGINX [email protected] @shadrin

Transcript of 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2...

Page 1: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

HTTP/2 Pros and Cons

Nick Shadrin / NGINX [email protected]

@shadrin

mailto:[email protected]
Page 2: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

About me• Nick Shadrin

• Technical Solutions Architect with NGINX

• Based in San Francisco

• 15 years experience with web tech

• [email protected] / @shadrin

Page 3: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Links

All links in one page: https://shadrin.org/talks/

Page 4: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Agenda• Protocol overview

• HTTP/1 and HTTP/2 optimizations

• Troubleshooting

• Benchmarks

• Use of HTTP/2 with NGINX

• Conclusions

Page 5: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

HTTP historyYear Version RFC#

1991 0.9

1996 1.0 1945

1999 1.1 2616 and7230 .. 7235

2015 2 7540

see Wikipedia

Page 6: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

HTTP/1.1 exampleGET /test HTTP/1.1

Host: example.com

User-Agent: Mozilla

X-Forwarded-For: 192.168.10.1

Accept: image/gif, image/jpeg, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

HTTP/1.1 301 Moved Permanently

Server: nginx/1.9.9

Date: Tue, 19 Jan 2016 00:19:07 GMT

Content-Type: text/html

Content-Length: 184

Connection: close

Location: https://example.com/test

https://example.com/test
Page 7: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

SPDY• Announced in 2009 by Google

• Since then implemented in all major browsers

• Major goal: reduce page load time

• Major performance enhancements:

• Compressed headers

• Flow control

• Server Push

Page 8: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

HTTP/2 overview• Introduced in 2015 as a standard

• Based on SPDY

• Includes major changes compared to HTTP/1:

• Binary headers with HPACK

• Multiple streams

• Prioritization

• Server Push

Page 9: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Encryption• Is encryption required?

• Spec says "No"

• Browser vendors say "Yes"

Page 10: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Protocol negotiation

• Upgrade header

• NPN

• ALPN

Page 11: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

NPN

• Next protocol negotiation

• Server lists the protocols

• Client picks one

Page 12: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

ALPN / RFC7301• Application level protocol negotiation

• Client lists the protocols

• Server picks one

• Results in fewer round trips

• Available in openssl 1.0.2

Page 13: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Revise your optimizations

• Domain sharding

• Image sprites

• Concatenating code files

Page 14: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Domain Shadring

• Browser opens 6 connections to the host

• Distribute your resources through multiple domains

• Does it help when you use HTTP/2? - No.

Page 15: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Image Sprites

• Aggregate multiple images in a single file

• Separate images on the client side

• Does it help when you use HTTP/2? - Somewhat.

Page 16: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Concatenating code files

• Combine JS and CSS into larger files

• Does it help when you use HTTP/2? - Not significantly.

Page 17: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Revise your optimizations• Domain sharding

• Image sprites

• Concatenating code files

• All these optimizations add to the management overhead.

Page 18: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

HTTP/2 stats today

• Is it time already to use HTTP/2? Let's look at the statistics

Page 19: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

HTTP/2 usage (caniuse.com)

http://caniuse.com
Page 20: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

HTTP/2 usage (caniuse.com)

http://caniuse.com
Page 21: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

HTTP/2 usage (w3techs.com)

%

http://w3techs.com
Page 22: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Downsides• Greater overhead for the single connection.

• You might not need SSL.

• HTTP/1.x optimizations hurt.

• Big downloads don’t benefit.

• Your customers may not care.

Page 23: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

HTTP/2 is unreadable

Page 24: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Troubleshooting HTTP/2 with Wireshark

1. Set the key log file ENV variable:export SSLKEYLOGFILE=/Users/path/file.key

2. Open your browser:open -a Google\ Chrome

3. Set the key file in Wireshark

Page 25: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions
Page 26: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions
Page 27: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions
Page 28: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Benchmarks

Page 29: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Benchmarks from nginx.conf 2015

• Synthetic page

• Measuring first paint time

Page 30: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions
Page 31: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions
Page 32: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Benchmark setup• NGINX 1.9.9

• Ubuntu 15.10

• Openssl 1.0.2

• Chrome

• Measuring full page reload

Page 33: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

New benchmark page• Free template BCORE Admin:

http://binarytheme.com/bootstrap-free-admin-dashboard-template/

• Added more images: 54 objects total

Page 34: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions
Page 35: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions
Page 36: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions
Page 37: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions
Page 38: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

NGINX support for h2user@server$ ./configure --with-http_v2_module --with-http_ssl_module

[...]

user@server$ nginx -V

nginx version: nginx/1.9.9

built by gcc 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04)

built with OpenSSL 1.0.1f 6 Jan 2014

TLS SNI support enabled

configure arguments: --with-http_v2_module --with-http_ssl_module

Page 39: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

NGINX config for h2server {

listen 443 ssl http2;

server_name .example.com;

ssl_certificate /etc/nginx/ssl/example.com.crt;

ssl_certificate_key /etc/nginx/ssl/example.com.key;

ssl_protocols TLSv1.2;

root /data/example.com;

location / {

proxy_pass http://backend.example.com/;

}

}

Page 40: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

NGINX logs for h2• $request = GET /url HTTP/2.0

• 10.2.2.2 - - [18/Jan/2016:16:51:40 -0800] "GET / HTTP/2.0" 200 3470 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.111 Safari/537.36"

Page 41: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

NGINX Amplify for monitoring

Page 42: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Useful tools

caniuse.com

letsencrypt.com

webpagetest.org

http://caniuse.com
http://letsencrypt.com
http://webpagetest.org
Page 43: 2 Pros and Cons - SCALE · 2016-01-24 · Agenda • Protocol overview • HTTP/1 and HTTP/2 optimizations • Troubleshooting • Benchmarks • Use of HTTP/2 with NGINX • Conclusions

Links

All links in one page: https://shadrin.org/talks/


Nginx HTTP Server - Third Edition - Sample Chapter

Nginx HTTP Server - Third Edition - Sample Chapter

Dynamic Modules Development - NGINX#nginx #nginxconf Anatomy of Modules • 10 core — generic and OS-specific stuff • 9 event • 63 http • 9 stream • 7 mail 3 Let’s look

Dynamic Modules Development - NGINX#nginx #nginxconf Anatomy of Modules • 10 core — generic and OS-specific stuff • 9 event • 63 http • 9 stream • 7 mail 3 Let’s look

NGINX IBM COS solutions compared to NGINX Plus. Using core NGINX reverse proxy functionality available in both NGINX OSS and NGINX Plus, NGINX can serve as a high-performance load

NGINX IBM COS solutions compared to NGINX Plus. Using core NGINX reverse proxy functionality available in both NGINX OSS and NGINX Plus, NGINX can serve as a high-performance load

NSX-T Deep Dive: Kubernetes Networkingadmin@k8s -master:~$ kubectl run nginx foo --image=nginx n foo deployment "nginx-foo"created admin@k8s-master:~$ kubectl run nginx-bar --image=nginx

NSX-T Deep Dive: Kubernetes Networkingadmin@k8s -master:~$ kubectl run nginx foo --image=nginx n foo deployment "nginx-foo"created admin@k8s-master:~$ kubectl run nginx-bar --image=nginx

NGINX Amplify: Monitoring NGINX with Advanced Filters and Custom Dashboards

NGINX Amplify: Monitoring NGINX with Advanced Filters and Custom Dashboards

NGINX for Windows - Documentationnginx-win.ecsds.eu/download/documentation-pdf/nginx for Windows... · 9. REDIRECT ALL EXCEPT ROOT (FOR HTTP TO HTTPS REDIRECTION) ... NGINX for Windows

NGINX for Windows - Documentationnginx-win.ecsds.eu/download/documentation-pdf/nginx for Windows... · 9. REDIRECT ALL EXCEPT ROOT (FOR HTTP TO HTTPS REDIRECTION) ... NGINX for Windows

WiNG5 CAPTIVE PORTAL DESIGN GUIDE - Test Page for the Nginx HTTP

WiNG5 CAPTIVE PORTAL DESIGN GUIDE - Test Page for the Nginx HTTP

Enabling HTTP/2 on Lotus Domino - AGECOM · PDF fileINTRODUCTION This guide describes how you can provide HTTP/2 connectivity to your Lotus Domino server using NGINX - a free open-source

Enabling HTTP/2 on Lotus Domino - AGECOM · PDF fileINTRODUCTION This guide describes how you can provide HTTP/2 connectivity to your Lotus Domino server using NGINX - a free open-source

NGINX Plus on AWS - NGINX | High Performance Load Balancer ... · PDF fileNGINX Plus brings end-to-end performance and scalability to modern web ... high concurrency HTTP reverse proxy,

NGINX Plus on AWS - NGINX | High Performance Load Balancer ... · PDF fileNGINX Plus brings end-to-end performance and scalability to modern web ... high concurrency HTTP reverse proxy,

Consider for HTTP/2.0 SPDY and What to · PDF fileSPDY and What to Consider for HTTP ... Others: Cotendo, Strangeloop, iPhone client, Apache mod-spdy, nginx beta, jetty, netty, libraries

Consider for HTTP/2.0 SPDY and What to · PDF fileSPDY and What to Consider for HTTP ... Others: Cotendo, Strangeloop, iPhone client, Apache mod-spdy, nginx beta, jetty, netty, libraries

Embedded Linux optimizations - Bootlinlpj= 13 Free Electrons. Kernel, drivers and embedded Linux development, consulting, training and support. http//freeelectrons.com

Embedded Linux optimizations - Bootlinlpj= 13 Free Electrons. Kernel, drivers and embedded Linux development, consulting, training and support. http//freeelectrons.com

WURFL InFuze for NGINX+...for NGINX+ Load Balancing NGINX Plus Module Application Servers Smartphone Desktop Tablet HTTP Requests with WURFL Capabilities Targeted, Device-Appropriate

WURFL InFuze for NGINX+...for NGINX+ Load Balancing NGINX Plus Module Application Servers Smartphone Desktop Tablet HTTP Requests with WURFL Capabilities Targeted, Device-Appropriate

Ant-loiter · worker nginx Ngx_http_lua_api rbtree Ngx_stream_limit_conn_module Ngx_http_limit_conn_module Ngx_stream_limit_req_module http cache ssl Ngx_http_upstream_zone_module

Ant-loiter · worker nginx Ngx_http_lua_api rbtree Ngx_stream_limit_conn_module Ngx_http_limit_conn_module Ngx_stream_limit_req_module http cache ssl Ngx_http_upstream_zone_module

Nortel / Cisco Interoperability TCG - Test Page for the Nginx HTTP

Nortel / Cisco Interoperability TCG - Test Page for the Nginx HTTP

NGINX 101 - SCALE 16x | 16x NGINX functionality includes HTTP request, proxy and caching services which can be combined into a complete application delivery platform. Or, as we ...

NGINX 101 - SCALE 16x | 16x NGINX functionality includes HTTP request, proxy and caching services which can be combined into a complete application delivery platform. Or, as we ...

Nginx Internals

Nginx Internals

Nginx: Accelerate Rails, HTTP Tricks

Nginx: Accelerate Rails, HTTP Tricks

NGINX modules reference...Nginx, Inc. develops and maintains NGINX open source distribution, and o ers commercial support and professional services for NGINX. About NGINX Plus •

NGINX modules reference...Nginx, Inc. develops and maintains NGINX open source distribution, and o ers commercial support and professional services for NGINX. About NGINX Plus •

Content Caching with NGINX and NGINX Plus

Content Caching with NGINX and NGINX Plus

Tuning NGINX for high performance - SCALE · Tuning NGINX for high performance Nick Shadrin nick@nginx.com. #nginx #nginxconf ... • NGINX Amplify is a free monitoring SaaS solution.

Tuning NGINX for high performance - SCALE · Tuning NGINX for high performance Nick Shadrin [email protected]. #nginx #nginxconf ... • NGINX Amplify is a free monitoring SaaS solution.