[GTER] enable compressed HTTP content encoding for BR RRDP?
Job Snijders
job at sobornost.net
Fri Nov 7 12:43:03 -03 2025
Hey folks,
Small request for optimising workflows: I noticed the NIC BR RRDP server
doesn't seem to support HTTP gzip compression. Tested as follows:
$ curl -i -H "Accept-Encoding: gzip, deflate" https://rpki-repo.registro.br/rrdp/b0982bb6-6f99-448a-9f71-91a86a455e39/300590/e99e8396c076633d/snapshot.xml 2> /dev/zero | head -16
HTTP/2 200
server: nginx
date: Fri, 07 Nov 2025 15:23:08 GMT
content-type: text/xml
content-length: 73463622
last-modified: Fri, 07 Nov 2025 15:13:02 GMT
etag: "690e0c7e-460f746"
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
feature-policy: accelerometer 'none';ambient-light-sensor 'none';autoplay 'none';camera 'none';encrypted-media 'none';fullscreen 'self';geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none';speaker 'self';sync-xhr 'none';usb 'none';vr 'none';
content-security-policy: default-src 'none';base-uri 'self';connect-src 'none';img-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';font-src 'self';object-src 'none';media-src 'self';form-action 'self';frame-ancestors 'self'
accept-ranges: bytes
This is a pity, because RRDP RPKI content compresses well (easily
achieves 50% reduction in data transfer), see this construed example
70MB -> 30MB:
$ curl -i https://rpki-repo.registro.br/rrdp/b0982bb6-6f99-448a-9f71-91a86a455e39/300590/e99e8396c076633d/snapshot.xml | gzip | wc -c
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 70.0M 100 70.0M 0 0 4475k 0 0:00:16 0:00:16 --:--:-- 7151k
30518387
It's straight-forward to enable HTTP gzip compression in nginx:
server {
gzip on;
gzip_types text/plain text/xml application/xml;
gzip_vary on;
...
}
https://docs.nginx.com/nginx/admin-guide/web-server/compression/
https://nginx.org/en/docs/http/ngx_http_gzip_module.html
Nowadays almost all HTTP client implementations support gzip
compression, so its quite the efficiency improvement for all involved -
especially when you're fetching the RPKI data over high latency links
from outside Brasil, like me! :-)
Can HTTP compression please be enabled on the rpki-repo.registro.br HTTP
server?
Kind regards,
Job
ps. Super sad to read Ruben passed away, my condoleances.
More information about the gter
mailing list