Cloudflare AKE reduces origin HelloRetryRequests from 52% to 3.7%

Cloudflare has introduced Automatic Key Exchange (AKE) to optimize the TLS handshake process between its edge network and origin servers. By leveraging TLS 1.3 features, AKE allows Cloudflare to proactively negotiate key shares, significantly reducing the frequency of HelloRetryRequest messages. Previously, these requests accounted for 52% of connections, causing latency due to extra round trips. With the implementation of AKE, this figure has plummeted to 3.7%. This improvement is particularly beneficial for connections where the client and server do not share a common key exchange group, as it eliminates the need for the server to request a retry. By streamlining these cryptographic handshakes, Cloudflare enhances overall web performance and reduces the load on origin infrastructure. This update represents a major step forward in minimizing latency for global internet traffic, ensuring faster and more efficient secure connections for users and origin servers alike.