Accelerate TLS with DPDK
summary
DPDK offloads TLS handshake and record work to crypto and security devices using rte_cryptodev for raw ciphers and rte_security for full protocol offload, handling IVs, padding, sequence numbers and anti‑replay. Asymmetric ops cost tens to hundreds of thousands of cycles (ECDH ~10K–100K, RSA several 100K) so offload cuts CPU latency; TLS 1.3/1.2 and DTLS 1.2 are supported, unit tests land in 23.11 and record offload ships on Marvell Octeon 10 Crypt PMD.
AI-written summary · about
chapters (6)
- 0:00Introduction to TLS and DPDK
- 8:56TLS handshake protocol
- 11:47Accelerating TLS handshake with DPDK
- 12:09TLS record protocol overview
- 23:11DPDK TLS record acceleration
- 29:15Current status and future
related talks
36mCryptodev and Security Library Updates in DPDK
27mSpeeding Up Linux Disk Encryption
37mOpenSSL Hardware Offload Enhancement
42mAccelerating Envoy with the Linux Kernel
37mOpenSSL Hardware Offload Enhancement
20mmmTLS: Scaling the Performance of Encrypted Network Traffic Inspection
37mSPDK Based User Space NVMe Over TCP Transport Solution
27msRDMA -- Efficient NIC-based Authentication and Encryption for Remote Direct Memory