Abstract:
TLS is the protocol of choice for securing today's ecommerce and online transactions, but adding TLS to a web server imposes a significant overhead relative to an insecure web server on the same platform. We perform a comprehensive study of the performance costs of TLS. Our methodology is to profile TLS web servers with tracedriven workloads, replacing individual components inside TLS with no-ops, and measuring the observed increase in server throughput. We estimate the relative costs of each component within TLS, predicting the areas for which future optimizations would be worthwhile. Our results we show that RSA accelerators are effective for e-commerce site workloads , because they experience low TLS session reuse. Accelerators appear to be less effective for sites where all the requests are handled by a TLS server, thus having higher session reuse rate; investing in a faster CPU might prove more effective.
Citations
|
792
|
Applied Cryptography
– Schneier
- 1996
|
|
248
|
Locality-aware request distribution in cluster-based network servers
– Pai, Aron, et al.
- 1998
|
|
214
|
Flash: An efficient and portable web server
– Pai, Druschel, et al.
- 1999
|
|
154
|
IO-lite: A unified I/O buffering and caching system
– Pai, Druschel, et al.
- 1999
|
|
137
|
Using the SimOS machine simulator to study complex computer systems
– Rosenblum, Bugnion, et al.
- 1997
|
|
96
|
Network behavior of a busy web server and its clients
– Mogul
- 1995
|
|
91
|
A scalable and explicit event delivery mechanism for UNIX
– Banga, Mogul, et al.
- 1999
|
|
88
|
Scalable kernel performance for Internet servers under realistic loads
– Banga, Mogul
- 1998
|
|
81
|
Measuring the impact of event dispatching and concurrency models on web server performance over high-speed networks
– Hu, Pyarali, et al.
- 1997
|
|
55
|
Server operating systems
– Kaashoek, Engler, et al.
- 1996
|
|
48
|
Measuring the capacity of a Web server under realistic loads
– Banga, Druschel
- 1999
|
|
30
|
Transport Layer Security, how much does it really cost
– Apostolopoulos, Peris, et al.
- 1999
|
|
30
|
The effects of wide-area conditions on WWW server performance
– Nahum, Rosu, et al.
- 2001
|
|
27
|
Performance issues in WWW servers
– Nahum, Barzilai, et al.
- 1999
|
|
18
|
Secure web server performance dramatically improved by caching SSL session keys
– Goldberg, Buff, et al.
- 1998
|
|
15
|
Improving SSL handshake performance via batching
– Boneh, Shacham
- 2001
|
|
12
|
The TLS Protocol, Version 1.0. Internet Engineering Task Force
– Dierks, Allen
- 1999
|
|
6
|
Cryptology as a Network Service
– Dean, Berson, et al.
- 2001
|
|
2
|
Secure Blue: An architecture for a high volume SSL Internet server
– Mraz
- 2001
|
|
1
|
RSIM: An execution-driven simulator for 1LP-based shared-memory multiprocessors and uniprocessors
– Pai, Ranganathan, et al.
- 1997
|