Eureka AIR delivers breakthrough ideas for toughest innovation challenges, trusted by R&D personnel around the world.

Method for improving https application performance of WebServer by using request/data aggregation

A technology for data aggregation and application performance, applied in the field of information security, can solve problems such as large hardware switching overhead, reduce mode switching overhead and context switching overhead, improve utilization, and improve https application performance.

Inactive Publication Date: 2017-10-20
CHONGQING UNIV
View PDF5 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0015] In view of this, the present invention provides a method for improving the https application performance of WebServer by using request / data aggregation, and solves the problem of a large amount of hardware switching overhead caused by multiple calls to the hardware engine to complete the encryption operation during the https encryption process

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for improving https application performance of WebServer by using request/data aggregation
  • Method for improving https application performance of WebServer by using request/data aggregation
  • Method for improving https application performance of WebServer by using request/data aggregation

Examples

Experimental program
Comparison scheme
Effect test

Embodiment

[0041] The embodiment of the present invention takes the nginx server application as an example to illustrate how to use request / data aggregation to improve the HTTPS application performance of the WebServer.

[0042] First, take nginx as an example to analyze how the upper-layer WebServer application performs SSL data processing on the original data requested through OpenSSL.

[0043] like figure 2 As shown, when nginx sends data, it will call the ngx_output_chain() function to send the cached https data chain, and this function will further call the ngx_ssl_send_chain() function to send the data. The ngx_ssl_send_chain() function will call the ngx_ssl_write() function to use the relevant interface in the OpenSSL library to perform SSL data encryption and verification processing on the original data and send the processed ciphertext data to the client.

[0044] The ngx_ssl_send_chain() function will control the size of the sent data block, as follows:

[0045]

[0046] ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a method for improving the https application performance of WebServer by using request / data aggregation. The method comprises the following steps: performing request aggregation on a plurality of encryption requests of an upper layer WebServer application, issuing the encryption requests to lower layer OpenSSL to perform SSL data processing, and calling a hardware encryption engine to accomplish a plurality of request encryption operations; and with respect to the encryption request with a single data length exceeding the SSL maximum source data length requirements, performing SSL data processing on the OpenSSL layer, performing data aggregation on data blocks, and calling the hardware encryption engine to accomplish a plurality of data block encryption operations. Compared with the manner of calling the hardware encryption engine for multiple times to accomplish the encryption operations of the traditional https request, the method disclosed by the invention has the advantages that after the request / data aggregation is performed, the mode switching cost and context switching cost of hardware calling in the https encryption process can be effectively reduced, the https application performance of WebServer is improved, and the utilization rate of the hardware encryption engine is also improved.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for improving HTTPS application performance of a Web Server by utilizing request / data aggregation. Background technique [0002] In order to protect the security of sensitive data during transmission, more and more governments, enterprises, and banks have begun to deploy SSL-based https communication. Secure Socket Layer protocol SSL (Secure Socket Layer) is a secure network communication protocol that uses a combination of public key and private key technology. The SSL protocol is a security protocol based on Web applications launched by Netscape. The SSL protocol specifies a mechanism that provides data security layers between application protocols (such as Http, Telenet, NMTP, and FTP) and TCP / IP protocols. It provides data encryption, server authentication, message integrity, and optional client authentication for TCP / IP connections. It is mainly used t...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06H04L29/08
CPCH04L63/0442H04L63/168H04L67/02
Inventor 肖春华张蕾谢玉华李林芝
Owner CHONGQING UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Eureka Blog
Learn More
PatSnap group products