Removed require ssl from site and now it is slow!

We had an extranet site that we are transitioning from
all pages being encrypted to just select pages being
encrypted. Before the transition the default.asp page
took about 1 second to load over a T1. Now it can take up
to two minutes. The kicker is that from the public
interface of the firewall to the dmz it loads fine, but
from the inside interface of the firewall to the dmz it
loads slow. It is just the images that load slow and if i
insert the s on the end of the http: tag it loads fast
again. I confirmed that the images do not have the
require ssl checkbox selected. I went through the
firewall logs looking for anything unusual and there were
no entries indicating a problem. The server is accessed
from the inside network directly to the dmz using an
internal dns server for resolution. I double checked the
dns server but i did not see anything obvious there and
it worked fine before we removed require ssl from the
default.asp page and other pages which no longer need it.
I am at a loss for what to look at next, any suggestions?
Please send response to my email as well as posting here.

Thanks,
Kevin

I have seen issues such as these, that appear to be not explainable. First, I would reboot your firewall. I have seen that resolve a lot
of issues in the past. After that, you will need to setup network monitor, and what you will want to do, is after you capture the sniff,
line it with the request in the web log itself. HTTP should be faster than HTTPS, for obvious reasons, so something is quirky here.

Thank you. I hope this information is helpful.

Tim Coffey [MSFT]

This posting is provided “AS IS” with no warranties, and confers no rights. You assume all risk for your use. © 2001 Microsoft
Corporation. All rights reserved.
--------------------
| Content-Class: urn:content-classes:message
| From: "Kevin McPhail" <kevin.mcphail.DeleteThis@adisseo.com>
| Sender: "Kevin McPhail" <kevin.mcphail.DeleteThis@adisseo.com>
| Subject: Removed require ssl from site and now it is slow!
| Date: Thu, 4 Sep 2003 07:41:47 -0700
| Lines: 23
| Message-ID: <1c6201c372f2$aae1e950$a501280a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcNy8qrhOJ5w99X9TR6/SNjIyXo1Cg==
| Newsgroups: microsoft.public.inetserver.iis
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.inetserver.iis:273891
| NNTP-Posting-Host: TK2MSFTNGXA13 10.40.1.165
| X-Tomcat-NG: microsoft.public.inetserver.iis
|
| We had an extranet site that we are transitioning from
| all pages being encrypted to just select pages being
| encrypted. Before the transition the default.asp page
| took about 1 second to load over a T1. Now it can take up
| to two minutes. The kicker is that from the public
| interface of the firewall to the dmz it loads fine, but
| from the inside interface of the firewall to the dmz it
| loads slow. It is just the images that load slow and if i
| insert the s on the end of the http: tag it loads fast
| again. I confirmed that the images do not have the
| require ssl checkbox selected. I went through the
| firewall logs looking for anything unusual and there were
| no entries indicating a problem. The server is accessed
| from the inside network directly to the dmz using an
| internal dns server for resolution. I double checked the
| dns server but i did not see anything obvious there and
| it worked fine before we removed require ssl from the
| default.asp page and other pages which no longer need it.
| I am at a loss for what to look at next, any suggestions?
| Please send response to my email as well as posting here.
|
| Thanks,
| Kevin
|