enable SSLSessionCache inside a shared memory segment in RAM for better performance in HTTPS.

slapos/recipe/apache_zope_backend/__init__.py

@@ -46,6 +46,7 @@ class Recipe(GenericBaseRecipe):
       required_path_list = [key, certificate]
       apache_conf['key'] = key
       apache_conf['certificate'] = certificate
+      apache_conf['ssl_session_cache'] = self.options['ssl-session-cache']
       apache_conf['ssl_snippet'] = pkg_resources.resource_string(__name__,
           'template/snippet.ssl.in') % apache_conf
     else:

slapos/recipe/apache_zope_backend/template/apache.zope.conf.in

@@ -11,6 +11,7 @@ LoadModule setenvif_module modules/mod_setenvif.so
 LoadModule version_module modules/mod_version.so
 LoadModule proxy_module modules/mod_proxy.so
 LoadModule proxy_http_module modules/mod_proxy_http.so
+LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
 LoadModule ssl_module modules/mod_ssl.so
 LoadModule mime_module modules/mod_mime.so
 LoadModule dav_module modules/mod_dav.so

slapos/recipe/apache_zope_backend/template/snippet.ssl.in

@@ -8,5 +8,5 @@ SSLRandomSeed connect builtin
 SSLProtocol -ALL +SSLv3 +TLSv1
 SSLHonorCipherOrder On
 SSLCipherSuite RC4-SHA:HIGH:!ADH
-
+SSLSessionCache shmcb:%(ssl_session_cache)s(512000)
 SSLProxyEngine On

slapos/recipe/davstorage/template/httpd.conf.in

@@ -14,6 +14,7 @@ LoadModule auth_digest_module "%(modules_dir)s/mod_auth_digest.so"
 LoadModule log_config_module "%(modules_dir)s/mod_log_config.so"
 LoadModule headers_module "%(modules_dir)s/mod_headers.so"
 LoadModule setenvif_module "%(modules_dir)s/mod_setenvif.so"
+LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
 LoadModule ssl_module "%(modules_dir)s/mod_ssl.so"
 LoadModule mime_module "%(modules_dir)s/mod_mime.so"
 LoadModule dav_module "%(modules_dir)s/mod_dav.so"

slapos/recipe/erp5/template/apache.zope.conf.in

@@ -11,6 +11,7 @@ LoadModule setenvif_module modules/mod_setenvif.so
 LoadModule version_module modules/mod_version.so
 LoadModule proxy_module modules/mod_proxy.so
 LoadModule proxy_http_module modules/mod_proxy_http.so
+LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
 LoadModule ssl_module modules/mod_ssl.so
 LoadModule mime_module modules/mod_mime.so
 LoadModule dav_module modules/mod_dav.so

software/erp5/snippet-backend.cfg

@@ -26,6 +26,7 @@ configuration-file = $${directory:apache-conf}/apache-%(backend_name)s.conf
 access-control-string = %(access_control_string)s
 pid-file = $${basedirectory:run}/apache-%(backend_name)s.pid
 lock-file = $${basedirectory:run}/apache-%(backend_name)s.lock
+ssl-session-cache = $${basedirectory:log}/apache-ssl-session-cache
 error-log = $${basedirectory:log}/apache-%(backend_name)s-error.log
 access-log = $${basedirectory:log}/apache-%(backend_name)s-access.log
 apache-binary = ${apache:location}/bin/httpd