LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

RE: How to handle SSL traffic

To: "'LinuxVirtualServer.org users mailing list.'" <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: RE: How to handle SSL traffic
From: Peter Mueller <pmueller@xxxxxxxxxxxx>
Date: Tue, 21 Oct 2003 10:47:53 -0700
> > > real server boxes?  I like the idea of saving 20-30+ 
> Thawte bills a
> month
> > > AND offloading a whole bunch of CPU for the one time cost of 
> > > $500/card..
> 
> I might be missing something, but how would a SSL accel. card 
> save you certificate costs?  You still have to buy a 
> certificate per domain (minimum).  The only thing a SSL accel 
> card would do is offload SSL processing to a dedicated card, 
> freeing up some processor power for other things.

Currently we have SSL-certificates per real server.

> The SSL card would be a good upgrade for an over-taxed 
> machine that needs to hang around a little longer, but for 
> ~$1200 (or less if you don't need rackmount), you can get a 
> whole system that will not only offload some of the 
> processing requirements, but it will add reliability to the 
> cluster as well.

I look at it as a way of extending the capabilities of 20-30 machines by
two-fold -- for cheap.  Too bad a solution like Intel's bridge/passthrough
SSL-decrypter doesn't exist anymore.

Sigh.

Peter
<Prev in Thread] Current Thread [Next in Thread>