HTTP vs HTTPS on oxal.org

HTTP.txt

my@server1:~$ ab -n 500 -c 50 http://oxal.org/
This is ApacheBench, Version 2.3 <$Revision: 1528965 $>
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/

Benchmarking oxal.org (be patient)
Completed 100 requests
Completed 200 requests
Completed 300 requests
Completed 400 requests
Completed 500 requests
Finished 500 requests


Server Software:        nginx/1.4.6
Server Hostname:        oxal.org
Server Port:            80

Document Path:          /
Document Length:        4980 bytes

Concurrency Level:      50
Time taken for tests:   1.361 seconds
Complete requests:      500
Failed requests:        0
Total transferred:      2573500 bytes
HTML transferred:       2490000 bytes
Requests per second:    367.40 [#/sec] (mean)
Time per request:       136.091 [ms] (mean)
Time per request:       2.722 [ms] (mean, across all concurrent requests)
Transfer rate:          1846.69 [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:        0    1   2.3      0       9
Processing:     7  129  25.7    131     170
Waiting:        5  129  25.7    131     170
Total:         11  130  24.1    131     170

Percentage of the requests served within a certain time (ms)
  50%    131
  66%    135
  75%    135
  80%    136
  90%    149
  95%    166
  98%    168
  99%    169
 100%    170 (longest request)

HTTPS.txt

my@server1:~$ ab -n 500 -c 50 https://oxal.org/
This is ApacheBench, Version 2.3 <$Revision: 1528965 $>
Copyright 1996 Adam Twiss, Zeus Technology Ltd, http://www.zeustech.net/
Licensed to The Apache Software Foundation, http://www.apache.org/

Benchmarking oxal.org (be patient)
Completed 100 requests
Completed 200 requests
Completed 300 requests
Completed 400 requests
Completed 500 requests
Finished 500 requests


Server Software:        nginx
Server Hostname:        oxal.org
Server Port:            443
SSL/TLS Protocol:       TLSv1.2,ECDHE-RSA-AES256-GCM-SHA384,4096,256

Document Path:          /
Document Length:        4980 bytes

Concurrency Level:      50
Time taken for tests:   34.283 seconds
Complete requests:      500
Failed requests:        0
Total transferred:      2566000 bytes
HTML transferred:       2490000 bytes
Requests per second:    14.58 [#/sec] (mean)
Time per request:       3428.268 [ms] (mean)
Time per request:       68.565 [ms] (mean, across all concurrent requests)
Transfer rate:          73.09 [Kbytes/sec] received

Connection Times (ms)
              min  mean[+/-sd] median   max
Connect:       79 2959 779.8   3197    3797
Processing:    46  305 516.4    143    3037
Waiting:       44  305 516.3    143    3037
Total:        375 3264 592.5   3357    4073

Percentage of the requests served within a certain time (ms)
  50%   3357
  66%   3416
  75%   3514
  80%   3578
  90%   3718
  95%   3782
  98%   3875
  99%   3904
 100%   4073 (longest request)

nginx.conf

server {
    listen 443 ssl default_server;
    server_name oxal.org www.oxal.org;
    server_tokens off;
    error_log  /var/log/nginx/error.log debug;


    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5;

    ssl_certificate /etc/letsencrypt/live/oxal.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/oxal.org/privkey.pem;

    ssl_session_cache   shared:SSL:1m;
    ssl_session_timeout 2m;

    keepalive_timeout   70;

    root #snip;
    index index.html index.htm;
    client_max_body_size 5m;

    location /.well-known/acme-challenge {
        root /var/www/letsencrypt;
    }

    location /static {
        alias #snap;
        autoindex off;
    }

   location / {
       include uwsgi_params;
       uwsgi_pass unix:///#snap/oxal.org.uwsgi.sock;
   }

    error_page 404 /404.html;
}

server {
    listen 80;
    server_name oxal.org www.oxal.org;
    location / {
        include uwsgi_params;
        uwsgi_pass unix:///tmp/oxal.org.uwsgi.sock;
    }
  
    location /static {
          alias #snap;
          autoindex off;
      }
}