diff --git a/Makefile b/Makefile
index a0a78d6..5af44eb 100644
--- a/Makefile
+++ b/Makefile
@@ -5,19 +5,33 @@ PACKAGES_TESTS ?= $$($(PACKAGE_LIST_TESTS))
 PACKAGE_DIRECTORIES := $(PACKAGE_LIST) | sed 's|github.com/pingcap/ng-monitoring/||'
 FILES     := $$(find $$($(PACKAGE_DIRECTORIES)) -name "*.go")
 FAIL_ON_STDOUT := awk '{ print } END { if (NR > 0) { exit 1 } }'
-
-LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMBuildTS=$(shell date -u '+%Y-%m-%d %H:%M:%S')"
-LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMGitHash=$(shell git rev-parse HEAD)"
-LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMGitBranch=$(shell git rev-parse --abbrev-ref HEAD)"
-
-GO              := GO111MODULE=on go
+BUILD_TS := $(shell date -u '+%Y-%m-%d %H:%M:%S')
+GIT_HASH := $(shell git rev-parse HEAD)
+GIT_BRANCH := $(shell git rev-parse --abbrev-ref HEAD)
+
+BUILD_GOEXPERIMENT ?=
+BUILD_CGO_ENABLED ?=
+BUILD_TAGS ?=
+ifeq ("${ENABLE_FIPS}", "1")
+	GIT_HASH := $(GIT_HASH) (with fips)
+	GIT_BRANCH := $(GIT_BRANCH) (with fips)
+	BUILD_TAGS += boringcrypto
+	BUILD_GOEXPERIMENT = GOEXPERIMENT=boringcrypto
+	BUILD_CGO_ENABLED = CGO_ENABLED=1
+endif
+
+LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMBuildTS=$(BUILD_TS)"
+LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMGitHash=$(GIT_HASH)"
+LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMGitBranch=$(GIT_BRANCH)"
+
+GO              := $(BUILD_GOEXPERIMENT) $(BUILD_CGO_ENABLED) GO111MODULE=on go
 GOBUILD         := $(GO) build
 GOTEST          := $(GO) test -p 8
 
 
 
 default:
-	$(GOBUILD) -ldflags '$(LDFLAGS)' -o bin/ng-monitoring-server ./main.go
+	$(GOBUILD) -ldflags '$(LDFLAGS)' -tags '${BUILD_TAGS}' -o bin/ng-monitoring-server ./main.go
 	@echo Build successfully!
 
 fmt:
diff --git a/component/conprof/http/api_test.go b/component/conprof/http/api_test.go
index 28843bd..4018df7 100644
--- a/component/conprof/http/api_test.go
+++ b/component/conprof/http/api_test.go
@@ -55,6 +55,9 @@ func TestAPI(t *testing.T) {
 	ts.setup(t)
 	defer ts.close(t)
 
+	// wait for http server ready
+	time.Sleep(time.Second)
+
 	topoSubScribe := make(topology.Subscriber)
 	err := conprof.Init(ts.db, topoSubScribe)
 	require.NoError(t, err)
diff --git a/utils/printer/fips.go b/utils/printer/fips.go
new file mode 100644
index 0000000..e9cebe9
--- /dev/null
+++ b/utils/printer/fips.go
@@ -0,0 +1,6 @@
+//go:build boringcrypto
+// +build boringcrypto
+
+package printer
+
+import _ "crypto/tls/fipsonly"