Optimization and implementation of AF_KTLS in user-space applications

Mgr. Ananya Chatterjee

Master's thesis

Anotácia:

AF_KTLS is a kernel module that introduces parts of TLS and DTLS protocols to the Linux kernel. User-space applications can transparently use AF_KTLS type socket to perform encryption and decryption of traffic. This thesis provides an analysis of the AF_KTLS module and identifies use cases where it could be used to optimize performance for user-space applications. The changes required for the optimization with AF_KTLS are then implemented and the results are benchmarked to identify bottlenecks and suggest possible solutions.

Abstract:

AF_KTLS is a kernel module that introduces parts of TLS and DTLS protocols to the Linux kernel. User-space applications can transparently use AF_KTLS type socket to perform encryption and decryption of traffic. This thesis provides an analysis of the AF_KTLS module and identifies use cases where it could be used to optimize performance for user-space applications. The changes required for the optimization with AF_KTLS are then implemented and the results are benchmarked to identify bottlenecks and suggest possible solutions.

Keywords

TLS, AF_KTLS, load balancing, HAProxy, optimization, security

Jazyk práce: English

Datum vytvoření / odevzdání či podání práce: 18. 12. 2017

Obhajoba závěrečné práce

• Obhajoba proběhla 1. 2. 2018
• Vedúci: prof. RNDr. Václav Matyáš, M.Sc.
• Oponent: Ing. Milan Brož

Masaryk University

Faculty of Informatics

Master programme / odbor:
Informatics / Information Technology Security (eng.)