SSLShader: Cheap SSL Acceleration with Commodity Processors

Keon Jang, Sangjin Han, Seungyeop Han, Sue Moon, KyoungSoo Park
8th USENIX conference on Networked systems design and implementation, 2011


   title={Sslshader: cheap ssl acceleration with commodity processors},

   author={Jang, K. and Han, S. and Han, S. and Moon, S. and Park, K.},

   booktitle={Proceedings of the 8th USENIX conference on Networked systems design and implementation},



   organization={USENIX Association}


Download Download (PDF)   View View   Source Source   



Secure end-to-end communication is becoming increasingly important as more private and sensitive data is transferred on the Internet. Unfortunately, today’s SSL deployment is largely limited to security or privacycritical domains. The low adoption rate is mainly attributed to the heavy cryptographic computation overhead on the server side, and the cost of good privacy on the Internet is tightly bound to expensive hardware SSL accelerators in practice. In this paper we present high-performance SSL acceleration using commodity processors. First, we show that modern graphics processing units (GPUs) can be easily converted to general-purpose SSL accelerators. By exploiting the massive computing parallelism of GPUs, we accelerate SSL cryptographic operations beyond what state-of-the-art CPUs provide. Second, we build a transparent SSL proxy, SSLShader, that carefully leverages the trade-offs of recent hardware features such as AESNI and NUMA and achieves both high throughput and low latency. In our evaluation, the GPU implementation of RSA shows a factor of 22.6 to 31.7 improvement over the fastest CPU implementation. SSLShader achieves 29K transactions per second for small files while it transfers large files at 13 Gbps on a commodity server machine. These numbers are comparable to high-end commercial SSL appliances at a fraction of their price.
No votes yet.
Please wait...

* * *

* * *

HGPU group © 2010-2021 hgpu.org

All rights belong to the respective authors

Contact us: