OpenSSL Hardware Offload Enhancement
summary
Describes using OpenSSL’s new ASYNC library, enhanced TLS stack and engine framework to offload TLS cryptography to hardware for Nginx and FD.io/VPP, focusing on achieving high throughput and low CPU use. Covers practical solutions for enterprise concerns (CPU/memory consumption and user private key protection) and details a recently merged kernel-bypass asynchronous communication enhancement now in OpenSSL 3.0.0 master.
AI-written summary · about
chapters (12)
- 0:00Intro
- 3:23Motivation - TLS everywhere
- 9:54TLS Hardware Acceleration
- 11:47Intel® QuickAssist Technology
- 13:39Background - Synchronous Mode
- 17:13Synchronous Mode vs Asynchronous Mode
- 18:24OpenSSL asynchronous introduction Fiber based asynchronous mechanism
- 21:51Apply OpenSSL asynchronous in Nginx
- 25:34Event notification
- 26:28Enhanced callback mechanism
- 30:11Enable TLS support based on user space VPP stack
- 33:02Key protection technology
related talks
37mOpenSSL Hardware Offload Enhancement
30mAccelerate TLS with DPDK
32mPQC in OpenSSL Library
36mEnhancing Envoy: Certificate Handling at the Edge
01h 01mHTTPS & TLS in 2016: Security practices from the front lines
24mOpenSSL Crypto PMD - Analysis and Optimisations
53mOpenSSL Deep Dive: The Good, Bad And Not-So-Ugly
43mMathematics and development of fast TLS handshakes