Transcription of KTLS: Linux Kernel Transport Layer Security
{{id}} {{{paragraph}}}
ktls : Linux Kernel Transport Layer Security1stDave WatsonFacebookSan Francisco, Layer Security (TLS) is a widely-deployed proto-col used for securing TCP connections on the Internet. TLSis also a required feature for HTTP/2, the latest web Kernel implementations provide new opportunities for op-timization of TLS. This paper explores a possible Kernel TLSimplementation, as well as the Kernel features it enables, suchas sendfile(), BPF programs, and hardware TLS offload. Ourimplementation saves up to 7% CPU copy overhead and upto 10% latency improvements when combined with the KernelConnection Multiplexor (KCM).KeywordsTLS, DTLS, Linux , Security ,performance,sockets,OpenS SL, offloadIntroductionTransport Layer Security [2] (TLS) and Datagram TransportLayer Security (DTLS) are building blocks for Transport se-curity on the modern internet. The latest version of the Hy-pertext Transfer Protocol [1] (HTTP/2) specifies the use ofTLS.
KTLS: Linux Kernel Transport Layer Security 1st Dave Watson Facebook San Francisco, USA davejwatson@fb.com Abstract Transport Layer Security (TLS) is a widely-deployed proto-
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document:
{{id}} {{{paragraph}}}