Long installation of TLS in site timings, reasons?

Question

TLS

Almost all uploaded files have a long "Setting TLS" item in the timings:

Frontend is given to nginx, backend to Apache
Where to dig to significantly reduce this parameter. Enable Http/2 ?

Answer 1

Almost certainly the provider is kicking, it's his DPI or similar servers that introduce delays.
Recent years for Russia are the norm, unfortunately, and solutions are seen only in revolutionary extremist options.
It's easy to check - set up a proxy / vpn on a server outside the RU zone (and you should have such ones almost by default).