The invention discloses design architecture and a method for secure load balancing by utilizing SSL communication protocol, in particular to provide secure and reliable data communication for
client and load balancing equipment by introducing SSL (Security Socket Layer) communication protocol. The invention mainly designs a processor SSL-PU based on SSL
encryption, wherein, the processor SSL-PU is loaded in a load balancer and comprises a
processing unit (PU), a
memory cell (Flash, SRAM,
DDR SDRAM, etc.), an
Ethernet network controller (PCI, PCI-X, PCI-E) and GbE
PHY (RJ45 interface). SSL-PU well solves the security problem caused by traditional load-balancing equipment and
client clear text and the problem that traditional SSL
encryption technology based on
software excessively occupies
system CPU and memory resources, thereby saving
server bandwidth, increasing
throughput and improving flexibility and availability of network; the processor well realizes the security data interaction with the
client, and delivers data in the form of clear text to a load-balancing module; the load balancing module locates a request to a corresponding
server according to load balancing
algorithm; the
server transmits data to the load balancing equipment; and the load balancer with an SSL-PU module transmits encrypted security data to the client, thereby completing secure data interactive access. The invention is particularly suitable for secure load-balancing scheduling of load balancing equipment of which the back end is a cluster
system.