...

• Current 'mode' for verifying peer certificate is a global option, it's good to have specific mode among different sites hosted on a same machine. If the mode is non-empty, it would be the preference when making the decision to verify peer or not. Otherwise, the global mode will take effect.

  Code Block
  # Client certification level should be:

...

• # 0 no client certificates # 1 client certificates optional # 2 client certificates required CONFIG proxy.config.ssl.client.certification_level INT 0

2. Optimization on TLS record size

...