Study On SSL Application/Accelerator

Recently great attention has been paid to the information security because of the rapid growth computer networks.SSL is the predominant method of securing Internet transactions over the World Wide Web (WWW)。The increasing volume of SSL-encrypted traffic presents significant challenges to architects of Internet web sites and data centers as well as system designers of networking equipment. SSL is notorious for crippling web server performance; processing of its complex encryption algorithms presents a heavy load to general-purpose computing platforms and software. Specialized solutions such as SSL accelerator cards have emerged. This Paper analysis on the the drawbacks of legacy SSL/TLS solutions based on cryptographic coprocessors and brings forward one-up SSL offload solution which is practically proved to be plug&play,efficient,low consumption of system resources and low realization cost. By the study of SSL protocol on both theoretical analysis and hardware accelerator will improve the security, usability, improve high performance and practical security solutions to network applications.In this dissertation, we put focus on the SSL offload technology. then The contributions of the dissertation are as follows:Analyse of the foundation of the SSL technology—cryptology, security of SSL, Analyse of the SSL protocols.And discuss three application by different design for SSL. Analyse of the design of the HTTPS website of my department which I have participate in. The main body of this dissertation is how to design the HTTPS system and application in the LVS LoadBalance by SSL offload technology of my project,it talk about the module structure,system flow,certificate management,software realization from the practice,performance test.At last, the paper shows SSL typical application and analyzes how to improve its performace by SSL offload technology. In the actual application, the test result shows that HTTPS website by SSL offload has scientific design and high performace.