Content
Very slow local access, very fast access from internet
Added by Charles Marcus over 4 years ago
Opening a new ticket for this since it is a different problem from the SSL issue that is now resolved...
I have a new local on premise Debian OpenProject server. I set it up initially without SSL, had trouble enabling SSL, but got that resolved with the help of Cyril (thanks Cyril!)...
Now, the problem is, while SSL is working, accessing the local web server from the local LAN is very slow - I mean, 20 - 4o seconds plus to go from link to link - although some load fairly fast.
The same links load very fast when accessing from the internet.
We use local Windows AD servers with AD integrated DNS for local DNS.
I'm providing the real DNS names here to make it easier for someone to see what I may have done wrong.
To make this work on a local URL, I created a new sub-domain: atl.mediafiche.com - on Cloudflare, and added the A record to point to a secondary public IP I have, then routed that on my Watchguard using an SNAT to the internal web server host. This seems to be working fine.
Next I added a new primary zone in DNS as atl.mediafiche.com - and created an A record there to point to the internal IP address (same internal IP the Watchguard SNAT points to).
The internal one works, but is v-e-e-e-e-r-y slow, with some page loads between 20 and 40 seconds. It seemed fine while on non-SSL, but I didn't really do much, so may just not have noticed a problem.
Since the external one works fine, this has GOT to be an internal DNS issue... but there is nothing I can see...
Hope someone has some kind of suggestion...
Is it possible to run the local one on non-SSL, and the remote only on SSL? Can it serve both simultaneously?
I'm coming in over the weekend, so if some kind soul is inclined to help and has some suggestions, it would be greatly appreciated!
Charles
Replies (4)
Also seeing 'Transferring data from secure.gravatar.com' during most of these long delayed page loads...
I'm afraid to say, if I can't get this resolved soon, I may have to scrap plans to implemen t OpenProject, we're in kind of a hurry to get something up and running, and I'm hearing grumblings about why aren't we just using Jira or Backlog or some other system...
So, I've looked everywhere and can't see where or even if it is possible to totally disable gravatars to see if this is the issue... so, is it possible, and if so, how/where?
Thanks
Oh - I looked in config/configuration.yml and settings.yml, and everywhere in the GUI...
Ok, this really peeves me off...
With the issues I had initially getting LetsEncrypt SSL Cert installed, I THOUGHT I had tested using a different browser after I got SSL working but had this slow access. Apparently I didn't.
The problem was I was using Firefox - and it recently switched on SecureDNS by default, which bypasses the local DNS Server for all by localhost by default.
Simply adding my local domain to about:config > > network.trr.excluded-domains fixed it right up.
Now to go see if Firefox's current GPO support includes changes to this setting...