Cloudflare AKE cuts origin HelloRetryRequests from 52% to 3.7%

iamsyr · hn · 2026-09-15

Cloudflare details its automatic key exchange (AKE) mechanism for origin connections in a new blog post. By automatically negotiating and caching appropriate key exchange groups between edge and origin, it avoids repeated HelloRetryRequest round trips during TLS handshakes. The share of origin requests triggering a HelloRetryRequest dropped from 52% to just 3.7%, meaningfully cutting handshake latency.

Original post →

More from Infra

Infra channel →