首页> 外文期刊>IEEE Transactions on Parallel and Distributed Systems >An SSL Back-End Forwarding Scheme in Cluster-Based Web Servers
【24h】

An SSL Back-End Forwarding Scheme in Cluster-Based Web Servers

机译:基于群集的Web服务器中的SSL后端转发方案

获取原文
获取原文并翻译 | 示例
           

摘要

State-of-the-art cluster-based data centers consisting of three tiers (Web server, application server, and database server) are being used to host complex Web services such as e-commerce applications. The application server handles dynamic and sensitive Web contents that need protection from eavesdropping, tampering, and forgery. Although the Secure Sockets Layer (SSL) is the most popular protocol to provide a secure channel between a client and a cluster-based network server, its high overhead degrades the server performance considerably and, thus, affects the server scalability. Therefore, improving the performance of SSL-enabled network servers is critical for designing scalable and high-performance data centers. In this paper, we examine the impact of SSL offering and SSL-session-aware distribution in cluster-based network servers. We propose a back-end forwarding scheme, called ssl_with_bf, that employs a low-overhead user-level communication mechanism like Virtual Interface Architecture (VIA) to achieve a good load balance among server nodes. We compare three distribution models for network servers, Round Robin (RR), ssl_with_session, and ssl_with_bf, through simulation. The experimental results with 16-node and 32-node cluster configurations show that, although the session reuse of ssl_with_session is critical to improve the performance of application servers, the proposed back-end forwarding scheme can further enhance the performance due to better load balancing. The ssl_with_bf scheme can minimize the average latency by about 40 percent and improve throughput across a variety of workloads.
机译:由三层(Web服务器,应用程序服务器和数据库服务器)组成的基于集群的最新数据中心正用于托管复杂的Web服务,例如电子商务应用程序。应用程序服务器处理动态和敏感的Web内容,这些内容需要防止窃听,篡改和伪造。尽管安全套接字层(SSL)是在客户端和基于群集的网络服务器之间提供安全通道的最流行的协议,但是其高开销却严重降低了服务器性能,从而影响了服务器的可伸缩性。因此,提高支持SSL的网络服务器的性能对于设计可扩展的高性能数据中心至关重要。在本文中,我们研究了基于群集的网络服务器中SSL提供和SSL会话感知分发的影响。我们提出了一种称为ssl_with_bf的后端转发方案,该方案采用了诸如虚拟接口体系结构(VIA)这样的低开销用户级别的通信机制,以实现服务器节点之间的良好负载平衡。通过仿真,我们比较了三种网络服务器分发模型,即轮询(RR),ssl_with_session和ssl_with_bf。 16节点和32节点群集配置的实验结果表明,尽管ssl_with_session的会话重用对于提高应用程序服务器的性能至关重要,但是由于更好的负载平衡,提出的后端转发方案可以进一步提高性能。 ssl_with_bf方案可以将平均延迟最小化约40%,并提高各种工作负载的吞吐量。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号