SSL服务器集群系统性能优化的研究

发布时间：2018-03-06 17:45

本文选题：SSL协议　切入点：服务器集群　出处：《中南大学》2014年硕士论文　论文类型：学位论文

【摘要】：SSL (Secure Socket Layer,安全套接层)协议是用来保障网络通信安全的协议,它被广泛应用于服务器集群系统中,为客户端和服务器之间的通信提供安全的数据传输通道。但SSL协议复杂的认证方案和加解密算法需占用大量服务器资源,将导致服务器性能下降。针对上述问题,本文主要对SSL服务器集群系统的性能进行了优化。主要工作如下： (1)由于集群的结构决定了其性能级别,所以设计良好的服务器集群系统能够极大地提高集群的整体性能。本文首先阐述了SSL服务器集群系统的整体架构,然后阐述了SSL服务器集群系统的总体功能,最后为了解决SSL服务器集群中正在处理客户请求的节点突然崩溃而造成频繁的SSL连接中断问题,深入研究了SSL协议的连接恢复机制。在该连接恢复机制中能将建立的SSL握手过程的必要的会话参数存储到数据库中,当服务器发生故障时,能够从数据库中取出必要的会话参数。因此该连接恢复机制避免了重新建立一个完整的SSL连接,减少了不必要的SSL握手连接损耗,保障了SSL连接的稳定性,从而让服务器更高效地提供安全服务。 (2)为了提高SSL集群系统的处理能力和减少响应时间,本文提出了基于服务与权值的负载均衡算法(Load balancing algorithm based on service and weights, SW-LBA)。首先请求转发器利用epoll模型来接受客户端的请求；然后服务器池中的各节点实时地收集自身的负载信息并周期性地动态反馈至请求转发器。接下来,请求转发器通过节点的性能与其负载状况相结合的方式来计算节点的负载量,并引入了RED(早期随机检测)技术来判定节点的负载状况；最后通过不同的方式对静态请求和动态请求进行目标选择。本文提出的算法综合考虑了请求服务的类型、服务器的处理能力及服务器的真实负载状况,因此能够充分利用服务器集群的资源。理论分析和实验分析表明,本文的研究成果能够有效地提高SSL服务器集群的性能。图24幅,表7个,参考文献59篇。
[Abstract]:SSL secure Socket layer (secure Socket layer) protocol is used to ensure the security of network communication. It is widely used in server cluster system. This paper provides a secure data transmission channel for the communication between client and server, but the complex authentication scheme and encryption and decryption algorithm of SSL protocol need a lot of server resources, which will lead to the deterioration of server performance. This paper mainly optimizes the performance of SSL server cluster system. The main work is as follows:. Because the structure of the cluster determines its performance level, the well-designed server cluster system can greatly improve the overall performance of the cluster. This paper first describes the overall architecture of the SSL server cluster system. Then the overall function of the SSL server cluster system is expounded. Finally, in order to solve the problem of frequent SSL connection interruption caused by the sudden collapse of the nodes processing customer requests in the SSL server cluster, The connection recovery mechanism of SSL protocol is deeply studied. In the connection recovery mechanism, the necessary session parameters of the established SSL handshake process can be stored in the database, when the server fails, The connection recovery mechanism avoids the re-establishment of a complete SSL connection, reduces the unnecessary loss of SSL handshake connection, and ensures the stability of the SSL connection. This allows the server to provide security services more efficiently. In order to improve the processing ability and reduce the response time of SSL cluster system, this paper proposes a load balancing algorithm based on service and weight, load balancing algorithm based on service and weight, SW-LBABA.First, the request transponder uses epoll model to accept client request; Then the nodes in the server pool collect their load information in real time and feed back periodically to the request repeater.; next, the request repeater calculates the load of the node by combining the performance of the node with its load condition. In addition, the red (early Random Detection) technique is introduced to determine the load status of the node. Finally, the static and dynamic requests are selected in different ways. The algorithm proposed in this paper considers the type of request service synthetically. The processing power of the server and the real load of the server can make full use of the resources of the server cluster. Theoretical analysis and experimental analysis show that the research results in this paper can effectively improve the performance of SSL server cluster.
【学位授予单位】：中南大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.05

【参考文献】