OpenSSL Hardware Offload Enhancement
summary
Covers using OpenSSL’s new ASYNC framework and engine mechanism to offload TLS cryptographic work to hardware for high-performance, low-CPU TLS in Nginx and FD.io/VPP. Describes practical enhancements addressing CPU/memory use, private key protection, and a kernel-bypass asynchronous communication mechanism now merged into OpenSSL 3.0.0 master.
AI-written summary · about
chapters (12)
- 0:00Intro
- 3:23Motivation - TLS everywhere
- 9:54TLS Hardware Acceleration
- 11:47Intel® QuickAssist Technology
- 13:39Background - Synchronous Mode
- 17:13Synchronous Mode vs Asynchronous Mode
- 18:24OpenSSL asynchronous introduction Fiber based asynchronous mechanism
- 21:51Apply OpenSSL asynchronous in Nginx
- 25:34Event notification
- 26:28Enhanced callback mechanism
- 30:11Enable TLS support based on user space VPP stack
- 33:02Key protection technology
related talks
37mOpenSSL Hardware Offload Enhancement
30mAccelerate TLS with DPDK
32mPQC in OpenSSL Library
36mEnhancing Envoy: Certificate Handling at the Edge
24mOpenSSL Crypto PMD - Analysis and Optimisations
53mOpenSSL Deep Dive: The Good, Bad And Not-So-Ugly
01h 01mHTTPS & TLS in 2016: Security practices from the front lines
43mMathematics and development of fast TLS handshakes