Linux Kernel TLS и Nginx

user nginx nginx;
worker_processes auto;
##worker_cpu_affinity auto;
#thread_pool default threads=256 max_queue=1024;
#worker_rlimit_nofile 128000;
#timer_resolution 1ms;
#pcre_jit on;

error_log /var/log/nginx/error_log info;

events {
        worker_connections 1024;
        use epoll;
#       accept_mutex off;
}

http {
        include /etc/nginx/mime.types;
        default_type application/octet-stream;

        log_format main
                '$remote_addr - $remote_user [$time_local] '
                '"$request" $status $bytes_sent '
                '"$http_referer" "$http_user_agent" '
                '"$gzip_ratio" "$ssl_ktls_status"';

        client_header_timeout 10m;
        client_body_timeout 10m;
        send_timeout 10m;

        connection_pool_size 256;
        client_header_buffer_size 1k;
        large_client_header_buffers 4 2k;
        request_pool_size 4k;

        gzip off;

        output_buffers 2 256k;
        postpone_output 1460;

#       aio                   threads=default;
        sendfile on;
        tcp_nopush on;
        tcp_nodelay on;
        ssl_ktls on;

        keepalive_timeout 75 20;

        ignore_invalid_headers on;
        index index.html;

#ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
#ssl_session_cache shared:SSL:10m;
#ssl_session_timeout 30m;
#ssl_prefer_server_ciphers on;
#ssl_ciphers AES128:AES256:HIGH:!aNULL:!MD5;             # AES128 cause least CPU load


        server {
                listen *:80 default rcvbuf=32768 backlog=2048 reuseport deferred so_keepalive=5s:3:3;

                listen *:443 http2 ssl default rcvbuf=32768 backlog=2048 reuseport deferred so_keepalive=5s:3:3;
                server_name localhost;
                ssl_certificate test.crt;
                ssl_certificate_key test.crt;

                access_log /var/log/nginx/localhost.access_log main;
                error_log /var/log/nginx/localhost.error_log info;

                root /var/www/localhost/htdocs;
        }
}