OpenSSL Hardware Offload Enhancement for TLS Acceleration
Explore the OpenSSL Hardware Offload Enhancement in this conference talk by Ping Yu from Intel. Delve into the practical experience of utilizing and enhancing the asynchronous acceleration framework in OpenSSL to enable high-performance, low CPU utilization TLS acceleration in Nginx and Fd.io/VPP. Learn about resolving challenges in enterprise-grade deployment, including CPU/memory consumption and user private key protection. Discover the recent enhancements for a more efficient, high-performance kernel bypass asynchronous communication mechanism, now merged into OpenSSL 3.0.0 master branch. Cover topics such as TLS hardware acceleration, Intel® QuickAssist Technology, synchronous vs asynchronous modes, fiber-based asynchronous mechanisms, event notification, enhanced callback mechanisms, and key protection technology.