Using Kernel TLS (kTLS) and TLS NIC offloading with OpenSSL ยท delthas
Using Kernel TLS (kTLS) and TLS NIC offloading with OpenSSL
2023-01-09
Context
Traditionally, the data path for sending HTTPS traffic is:
Read data from a file into a user-space buffer
Encrypt that data using a user-space cryptography routine
Send that encrypted data to a socket
The data is copied to a kernel-space socket buffer
The kernel sends the encrypted data to the NIC
The NIC writes the encrypted data to the wire
With Kernel TLS, this becomes:
Read data from a file into a user-space buffe...
Read more at delthas.fr