TTFB & SSL Checker
Measure how fast a website responds, phase by phase: DNS lookup, TCP connect, TLS handshake, time to first byte (TTFB) and download, with redirects followed up to 5 hops and 3 samples for a stable TTFB. The SSL section inspects the certificate chain, expiry, SAN list, TLS version, cipher, HSTS and HTTP/2 support. Measured from a BookMyHost server in India.
Reading the waterfall
DNS is the time to translate the hostname into an IP address. TCP is one network round trip to open the connection; it is a pure measure of distance and routing between this server and yours. TLS is the handshake (one round trip with TLS 1.3, two with TLS 1.2). TTFB is the wait for the first response byte after the request is sent: this is where slow databases, uncached pages and overloaded origins show up. Download is the remaining transfer, capped here at 1 MiB.
Hosting the site close to its visitors removes most of the TCP and TLS cost. For Indian audiences, a server in India such as a BookMyHost cloud VPS typically cuts 150 to 250 ms per round trip compared with a European or US origin.
Frequently asked questions
What is TTFB?
Time To First Byte: the delay between sending the HTTP request and receiving the first byte of the response. It includes server processing time but not DNS, TCP or TLS setup, which are shown separately.
What is a good TTFB?
Under 200 ms from a nearby location is good; 200 to 500 ms is acceptable; above 800 ms indicates slow origin processing, no caching or a distant server.
Where is the measurement taken from?
From a BookMyHost server in India. Latency to sites hosted abroad includes the intercontinental round trip, so compare numbers between runs rather than against a global benchmark.
Why does the SSL check say hostname mismatch?
The certificate does not list the hostname you entered in its Subject Alternative Names. Browsers show a security warning in this case. Reissue the certificate with the correct names.
Does it check OCSP stapling?
Not yet. It reports TLS version, cipher, certificate subject, issuer, SAN list, validity window, days remaining, chain length, signature algorithm, HSTS header and HTTP/2 support.
Can it test private or internal addresses?
No. Private, loopback, link-local, CGNAT and other internal addresses are refused, including names that resolve to them and redirects that point to them.
Embed / link to this tool
Found this useful? Paste the snippet into your docs, blog or wiki to link to the TTFB & SSL Checker.
<a href="https://bookmyhost.com/tools/ttfb-ssl-checker" title="TTFB & SSL Checker by BookMyHost">TTFB & SSL Checker</a> - free tool by <a href="https://bookmyhost.com">BookMyHost</a>