very big business needs, particularly in finance, health and e-commerce were constantly growing for secure VPN communications. They quickly adopt a policy "SSL Everywhere" where encryption is beyond the sensitive parts of an application session such as the login page and covers the whole of the transmission of content.
Historically in lower levels of overall speed, performance overhead imposed during the SSL session negotiation phase, including establishment of the connection, encryption result of the negotiation, session identification missions and key generation, dominated the overall performance of SSL sessions. Once the session has been established, the transfer of bulk data with encryption and decryption, was much less computationally expensive than the SSL negotiation phase.
Now, with many data centers are aware application delivery controller (ADC) overall throughput approaching and even exceeding 100Gbps territory both transaction rates per second and SSL bulk encrypted traffic capacities become critical. While transactions are often of short duration such as information basket and record health transfers, they are generated in huge volumes. The encrypted total traffic increases in direct proportion to the number of transactions. At this transfer rate performance overhead imposed during the negotiation phase SSL no longer dominates the overall dynamic performance of SSL sessions. Both the number of new SSL sessions that can be supported on a given period of time SSL transactions per second (TPS) and the vital transfer of encrypted traffic is important.
Complicating the challenge of security, organizations, driven in part by the National Institute of Standards and (NIST) recommendations technology, have the transition to more secure SSL Certificates 2048 bit. This trend is supported by the major browser vendors plans for not supporting Web sites using certificates with smaller keys to 2048 bits beyond the end of the year. This standard provides more security, but the performance of the network and applications is threatened without planning and appropriate infrastructure. The impact in this case is an exponential increase in the power of encryption, but at a cost of less than 4-5 times more processing applications
Do not worry. The height NetScaler MPX 200 2U series of ADCs incorporate the latest SSL acceleration hardware dedicated with support for both buttons 2048 and even 4096 bits. NetScaler provides essential encryption capabilities that avoid the need to compromise between having enhanced security and maintaining a high performance user experience. Just in time for network wide traffic these models provide more than 500,000 SSL transactions per second with certificates of 2048 bits and enable SSL processing bulk up to 75 Gbps. You heard that right; these specifications are not blogging typos. These represent gains of more than 2-4x those obtained on alternative ADC blades. NetScaler world records are derived from packet engine that intelligently load balance SSL SSL transactions among nuclei. Several SSL heart by queues greater use of hardware capabilities where multiple SSL operations can be queued per chip. So have at it. Gargantuan SSL TPS. Check. Massive SSL bulk transfers. Check. Now go to the bakery, you deserve it.
0 Komentar