Title
An SSL Back-End Forwarding Scheme in Cluster-Based Web Servers
Abstract
State-of-the-art cluster-based data centers consisting of three tiers (Web server, application server, and database server) are being used to host complex Web services such as e-commerce applications. The application server handles dynamic and sensitive Web contents that need protection from eavesdropping, tampering, and forgery. Although the secure sockets layer (SSL) is the most popular protocol to provide a secure channel between a client and a cluster-based network server, its high overhead degrades the server performance considerably and, thus, affects the server scalability. Therefore, improving the performance of SSL-enabled network servers is critical for designing scalable and high-performance data centers. In this paper, we examine the impact of SSL offering and SSL-session-aware distribution in cluster-based network servers. We propose a back-end forwarding scheme, called ssl_with_bf, that employs a low-overhead user-level communication mechanism like virtual interface architecture (VIA) to achieve a good load balance among server nodes. We compare three distribution models for network servers, round robin (RR), ssl_with_session, and ssl_with_bf, through simulation. The experimental results with 16-node and 32-node cluster configurations show that, although the session reuse of ssl_with_session is critical to improve the performance of application servers, the proposed back-end forwarding scheme can further enhance the performance due to better load balancing. The ssl_with_bf scheme can minimize the average latency by about 40 percent and improve throughput across a variety of workloads.
Year
DOI
Venue
2007
10.1109/TPDS.2007.1062
IEEE Trans. Parallel Distrib. Syst.
Keywords
Field
DocType
protocols,virtual interface architecture,ssl back-end forwarding scheme,round robin distribution,web server,web services,session-aware distribution,latency minimization,eavesdropping,tampering,server scalability,low-overhead user-level communication,server node,application server,server performance,data center,resource allocation,dynamic web contents,forgery,cluster,secure sockets layer,secure channel,network server,file servers,cluster-based web servers,ssl_with_bf distribution,user-level communication.,internet,web servers,load distribution,client-server systems,back-end forwarding,ssl_with_session distribution,application server layer,load balancing,e-commerce application,client-server syetm,state-of-the-art cluster-based data center,ssl-enabled network server,database server,security of data,cluster-based network server,e commerce,security,degradation,cryptography,load balance,scalability,web service,databases,switches,secure socket layer
Server farm,File server,Computer science,Load balancing (computing),Server,Computer network,Database server,Transport Layer Security,Operating system,Web server,Distributed computing,Application server
Journal
Volume
Issue
ISSN
18
7
1045-9219
Citations 
PageRank 
References 
1
0.36
22
Authors
3
Name
Order
Citations
PageRank
Jin-ha Kim132918.78
Gyu Sang Choi212120.20
Chita R. Das3146780.03