DocumentCode :
893079
Title :
An SSL Back-End Forwarding Scheme in Cluster-Based Web Servers
Author :
Kim, Jin-Ha ; Choi, Gyu Sang ; Das, Chita R.
Author_Institution :
Samsung Networks, Seoul
Volume :
18
Issue :
7
fYear :
2007
fDate :
7/1/2007 12:00:00 AM
Firstpage :
946
Lastpage :
957
Abstract :
State-of-the-art cluster-based data centers consisting of three tiers (Web server, application server, and database server) are being used to host complex Web services such as e-commerce applications. The application server handles dynamic and sensitive Web contents that need protection from eavesdropping, tampering, and forgery. Although the secure sockets layer (SSL) is the most popular protocol to provide a secure channel between a client and a cluster-based network server, its high overhead degrades the server performance considerably and, thus, affects the server scalability. Therefore, improving the performance of SSL-enabled network servers is critical for designing scalable and high-performance data centers. In this paper, we examine the impact of SSL offering and SSL-session-aware distribution in cluster-based network servers. We propose a back-end forwarding scheme, called ssl_with_bf, that employs a low-overhead user-level communication mechanism like virtual interface architecture (VIA) to achieve a good load balance among server nodes. We compare three distribution models for network servers, round robin (RR), ssl_with_session, and ssl_with_bf, through simulation. The experimental results with 16-node and 32-node cluster configurations show that, although the session reuse of ssl_with_session is critical to improve the performance of application servers, the proposed back-end forwarding scheme can further enhance the performance due to better load balancing. The ssl_with_bf scheme can minimize the average latency by about 40 percent and improve throughput across a variety of workloads.
Keywords :
Web services; client-server systems; file servers; protocols; resource allocation; security of data; Internet; Web services; application server; back-end forwarding; client-server syetm; cluster-based Web servers; data center; database server; dynamic Web contents; e-commerce application; eavesdropping; forgery; latency minimization; load balancing; low-overhead user-level communication; round robin distribution; secure channel; secure sockets layer; server scalability; session-aware distribution; ssl_with_bf distribution; ssl_with_session distribution; tampering; virtual interface architecture; Databases; Degradation; Forgery; Network servers; Protection; Protocols; Scalability; Sockets; Web server; Web services; Secure Sockets Layer; Web servers; application server layer; cluster; load distribution; user-level communication.;
fLanguage :
English
Journal_Title :
Parallel and Distributed Systems, IEEE Transactions on
Publisher :
ieee
ISSN :
1045-9219
Type :
jour
DOI :
10.1109/TPDS.2007.1062
Filename :
4218574
Link To Document :
بازگشت