Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.

Forums › Geekzone › Small change: adding SSL to gallery, more subdomains on CDN


BDFL
43806 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
Topic # 107149 8-Aug-2012 08:31 Send private message

A couple of small changes: we already force SSL for profile update page, private messages pages and login. I have extended this to image uploads and gallery as well, just in case you feel more comfortable if someone is not looking at the stream from your PC ;)

We have also changed our resources a bit, moving to our CDN provider (current MaxCDN) but soon to CloudFlare since they have a closer POP - if they can fix a problem with their DNS...

Using the CDN for resources will allow for less bandwidth utilisation - currently we have about 95% cache hit on the existing cdn.geekz1.com and hope to get similar levels in our other subdomains now on the CDN. 

The closer MaxCDN is about 200ms away, while the closer CloudFlare POP is only 40ms away. This will eventually make things event faster - although we think New Zealand's transparent proxies as implemented by most large ISPS do a good job of being a "fake CDN".






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2Next
3753 posts

Uber Geek

Trusted
Subscriber
  Reply # 669424 8-Aug-2012 09:05 Send private message

I'd be interested how you find CloudFlare. I considered moving my static resources to them a while back, but until their Australia data centre opened there was no significant enough benefit. Putting the static stuff closer could be an effective way to speed up my image heavy website and still take advantage of the cheap hosting in the US.




Asus eee pad transformer
iPod 2G
Windows 7 PC
Lots and lots of Nikon camera gear



BDFL
43806 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 669432 8-Aug-2012 09:12 Send private message

CloudFlare works ok for freitasm.com, which is still served from the Geekzone server but completely proxied by them. Not using all the optimization features as we use Stingray Aptimizer.

We use Aptimizer on Geekzone, which is the tool that made it so easy to have a CDN deployment a few years back, but using CloudFlare's SYD POP instead of MaxCDN LAX POP for New Zealand users would be great.

Alas, CloudFlare has hit a small problem when creating our CNAMES - we moved our NS from Dyn.com to CloudFlare but when activating the CloudFlare CDN/proxy for our resources (for example images.geekzone.co.nz) it just wouldn't create the correct CNAME for their proxied POP. They are currently investigating it.

In the meantime we moved all sub-domain resources to MaxCDN - not that we have much traffic on those, since most of the optimized combined resources come from cdn.geekz1.com and only non-optimized pages would use those sub-domain resources. All SSL pages are served by our server because we would need to have SSL certs in the CDN and the cost would go up very rapidly. We currently have a wildcard SSL cert in our server, and that's already expensive anyway.

When the CloudFlare DNS issue is fixed we will switch. This is probably happening in the next couple of days. If the CloudFlare DNS issue is not fixed we will decide on keeping the NS with them or moving back to Dyn.com.

On another note, jobs.geekzone.co.nz is currently being served by Google Page Speed. Latency is not great as the Google PS service doesn't use any local cache, so we are looking at moving it to our standard setup when CloudFlare comes online.






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

3753 posts

Uber Geek

Trusted
Subscriber
  Reply # 669436 8-Aug-2012 09:25 Send private message

Interesting, thanks. I think my setup would be a LOT simpler than yours, one subdomain for static resources, and my wordpress SEO plugin integrates with Cloudflare directly (my whole site is run by wordpress).




Asus eee pad transformer
iPod 2G
Windows 7 PC
Lots and lots of Nikon camera gear



BDFL
43806 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 669490 8-Aug-2012 10:32 Send private message

I have now switched the resources CDN to CloudFlare - you won't see much of an impact, unless the page is not being served from the optimized pool (shouldn't happen).

I've moved http://jobs.geekzone.co.nz from Google Page Speed to CloudFlare as well.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 



BDFL
43806 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 669559 8-Aug-2012 12:24 Send private message

Moved live.geekzone.co.nz to CloudFlare. Needed to do a bit of coding around the visitor's original IP address and it seems to be working fine.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

1939 posts

Uber Geek

Trusted
Subscriber
  Reply # 669704 8-Aug-2012 16:37 Send private message

Just keep watch over those stupid "anti-DoS" protections Cloudflare has. They are ridiculously poor at identifying real user traffic and constantly prompt legitimate users to be asked to solve CAPTCHAs to prove they are legitimate.

I don't think I've ever seen anyone say anything positive about Cloudflare (except "it's OK for a free product") to be honest.



BDFL
43806 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 669708 8-Aug-2012 16:38 Send private message

We still have the dyn.com and MaxCDN configurations and will change things if that becomes a problem - we are essentially running with security off, really using it as a CDN only.





Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

784 posts

Ultimate Geek
  Reply # 673545 17-Aug-2012 01:14 Send private message

the site is going slower than it was. i don't get why you're moving the web site to cloudflare?

cloudflare in general is slow - and you're sending dynamic pages there?

curl -v http://www.geekzone.co.nz/ > /dev/null 0.00s user 0.02s system 2% cpu 0.789 total

I tested that a while back - and it was around 350 to 380.



also for some reason now the dns ttl is insanely low - like 30 seconds?!



BDFL
43806 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 673560 17-Aug-2012 08:00 Send private message

mercutio: the site is going slower than it was.


Not from our sensors.

mercutio: i don't get why you're moving the web site to cloudflare?


We have reasons.

mercutio: cloudflare in general is slow - and you're sending dynamic pages there?


We have reasons.

At the bottom of every page you will see a comment with the time it took to create the page before sending it out.

mercutio: also for some reason now the dns ttl is insanely low - like 30 seconds?!


We have reasons. 

You should be getting resources (cdn.geekz1.com and *.geekzone.co.nz) from Australia. From my desktop I'm getting 40ms latency. 

This move means www.geekzone.co.nz is gone from 30ms to 40ms, while *.geekzone.co.nz and cdn.geekz1.com have gone down from 240ms to 40ms.

If you are not seeing this, then you have something in your network.







Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

241 posts

Master Geek
  Reply # 673629 17-Aug-2012 10:48 Send private message

Once they fix the ipv6 on their SYD PoP then ipv6 will be faster too, but at the moment it's ~160ms for me.




Cooking Forum

241 posts

Master Geek
  Reply # 673630 17-Aug-2012 10:50 Send private message

freitasm: Are you using the paid version of Cloudflare? Have you tried out railgun/SPDY on www.geekzone.co.nz?




Cooking Forum



BDFL
43806 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 673644 17-Aug-2012 11:45 Send private message

Yes, it is paid. No SPDY because we only support SSL in some pages, not all. Railgun requires an appliance that will do the communication between our servers and theirs - not the case for it yet.






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 



BDFL
43806 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 676336 24-Aug-2012 10:57 Send private message

Since we enabled SSL to our CDN and moved the domain to CloudFlare to take advantage of its new SYD POP I have now enabled SPDY on geekzone.co.nz... This is obviously only available in our SSL-enabled pages at the moment, but it's there.






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 



BDFL
43806 posts

Uber Geek

Administrator
Trusted
Geekzone
Subscriber
  Reply # 676386 24-Aug-2012 12:48 Send private message

mercutio: the site is going slower than it was. i don't get why you're moving the web site to cloudflare?

curl -v http://www.geekzone.co.nz/ > /dev/null 0.00s user 0.02s system 2% cpu 0.789 total


Unrelated to SSL but I have just made a very small change that will speed up the frontpage and the forum discussion pages...






Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) 

Geekzone Price comparison | Amazon Kindle order page | How to get the best out of Geekzone | New Zealand IT Jobs | Geekzone News | Jinglebugs 

3753 posts

Uber Geek

Trusted
Subscriber
  Reply # 701489 15-Oct-2012 14:25 Send private message

I'm curious to hear how the CloudFlare CDN's working out for you. Reliability, uptime and downtime, any other thoughts or observations.




Asus eee pad transformer
iPod 2G
Windows 7 PC
Lots and lots of Nikon camera gear

 1 | 2Next
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when new jobs are posted to our jobs board:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »
Geeksphere TV: Episode 19.1
Posted 25-May-2013 18:19

Amazon brings Kindle Fire to 170 countries, expand app store to more than 200 countries
Posted 24-May-2013 14:41

Gen-i and SAP partner in mobile business
Posted 23-May-2013 09:23

Ericsson to close down telecom cable manufacturing
Posted 23-May-2013 08:46

FaceToFace Communications and StarLeaf bring unique cloud-based videoconferencing to Australia and New Zealand
Posted 22-May-2013 09:12

IBM Watson finds a new job: customer services
Posted 22-May-2013 08:37


Trending now »
Hot discussions in our forums right now:

Fecked up religious people strike again :-(
Created by Mark, last reply by freitasm on 25-May-2013 08:44 (85 replies)
Pages... 4 5 6

Cannabis is illegal yet we have really strong 'legal highs' ?
Created by qwerty7, last reply by freitasm on 23-May-2013 23:20 (74 replies)
Pages... 3 4 5

A new project coming to Geekzone
Created by freitasm, last reply by l43a2 on 24-May-2013 23:02 (342 replies)
Pages... 21 22 23

HTC One (2013) owners' discussion
Created by Dingbatt, last reply by Technofreak on 26-May-2013 14:36 (1570 replies)
Pages... 103 104 105

Xbox One
Created by DjShadow, last reply by nathan on 26-May-2013 10:56 (78 replies)
Pages... 4 5 6

Monolithic Cement Sheet cladding mid 80s house - "leaky home" or not?
Created by joker97, last reply by mattwnz on 24-May-2013 23:46 (15 replies)

Orcon, Is this for real or a scam??
Created by old3eyes, last reply by DarthKermit on 22-May-2013 19:12 (29 replies)
Pages... 2

Entire house HTPC concept
Created by InfiniteLoop, last reply by darthmeow on 24-May-2013 12:19 (26 replies)
Pages... 2


Geekzone Jobs »
Most recent NZ jobs in technology:

Systems Consultant Project Manager
Posted 26-May-2013 14:28

Reporting & Payroll Manager
Posted 26-May-2013 13:28

Developer of interactive experiences
Posted 25-May-2013 21:28

Ambitious Project Coordinator
Posted 25-May-2013 19:28

Ambitious Project Coordinator
Posted 25-May-2013 19:28

Exceptional Senior Project Manager
Posted 25-May-2013 19:28

Multitalented Business Analyst
Posted 25-May-2013 18:28


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Updates »
Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.