DocumentCode :
1564304
Title :
Session-based adaptive overload control for secure dynamic Web applications
Author :
Guitart, Jordi ; Carrera, David ; Beltran, Vicenç ; Torres, Jordi ; Ayguadé, Eduard
Author_Institution :
Comput. Archit. Dept., Tech. Univ. of Catalonia, Barcelona, Spain
fYear :
2005
Firstpage :
341
Lastpage :
349
Abstract :
As dynamic Web content and security capabilities are becoming popular in current Web sites, the performance demand on application servers that host the sites is increasing, leading sometimes these servers to overload. As a result, response times may grow to unacceptable levels and the server may saturate or even crash. In this paper we present a session-based adaptive overload control mechanism based on SSL (secure socket layer) connections differentiation and admission control. The SSL connections differentiation is a key factor because the cost of establishing a new SSL connection is much greater than establishing a resumed SSL connection (it reuses an existing SSL session on server). Considering this big difference, we have implemented an admission control algorithm that prioritizes the resumed SSL connections to maximize performance on session-based environments and limits dynamically the number of new SSL connections accepted depending on the available resources and the current number of connections in the system to avoid server overload. In order to allow the differentiation of resumed SSL connections from new SSL connections we propose a possible extension of the Java Secure Sockets Extension (JSSE) API. Our evaluation on Tomcat server demonstrates the benefit of our proposal for preventing server overload.
Keywords :
Internet; Java; application program interfaces; file servers; scheduling; telecommunication congestion control; telecommunication security; API; JSSE; Java Secure Sockets Extension; SSL connections differentiation; Tomcat server; admission control; application server performance; resumed SSL connection; secure dynamic Web application; secure socket layer; server overload prevention; session-based adaptive overload control; Adaptive control; Admission control; Application software; Computer crashes; Concurrent computing; Delay; Java; Parallel processing; Programmable control; Sockets;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Parallel Processing, 2005. ICPP 2005. International Conference on
ISSN :
0190-3918
Print_ISBN :
0-7695-2380-3
Type :
conf
DOI :
10.1109/ICPP.2005.72
Filename :
1488631
Link To Document :
بازگشت