Catalog Details
CATEGORY
SecurityCREATED BY
UPDATED AT
June 19, 2024VERSION
1.0
Pattern Snapshot
Related Patterns
Accelerated mTLS handshake for Envoy data planes
MESHERY4421
What this pattern does:
Envoy uses BoringSSL as the default TLS library. BoringSSL supports setting private key methods for offloading asynchronous private key operations, and Envoy implements a private key provider framework to allow creation of Envoy extensions which handle TLS handshakes private key operations (signing and decryption) using the BoringSSL hooks.
CryptoMB private key provider is an Envoy extension which handles BoringSSL TLS RSA operations using Intel AVX-512 multi-buffer acceleration. When a new handshake happens, BoringSSL invokes the private key provider to request the cryptographic operation, and then the control returns to Envoy. The RSA requests are gathered in a buffer. When the buffer is full or the timer expires, the private key provider invokes Intel AVX-512 processing of the buffer. When processing is done, Envoy is notified that the cryptographic operation is done and that it may continue with the handshakes.
Envoy uses BoringSSL as the default TLS library. BoringSSL supports setting private key methods for offloading asynchronous private key operations, and Envoy implements a private key provider framework to allow creation of Envoy extensions which handle TLS handshakes private key operations (signing and decryption) using the BoringSSL hooks.
CryptoMB private key provider is an Envoy extension which handles BoringSSL TLS RSA operations using Intel AVX-512 multi-buffer acceleration. When a new handshake happens, BoringSSL invokes the private key provider to request the cryptographic operation, and then the control returns to Envoy. The RSA requests are gathered in a buffer. When the buffer is full or the timer expires, the private key provider invokes Intel AVX-512 processing of the buffer. When processing is done, Envoy is notified that the cryptographic operation is done and that it may continue with the handshakes.
Caveats and Consideration:
test
Compatibility:
Recent Discussions with "meshery" Tag
- Jun 18 | Accidently pushed my commit to running PR
- Jun 17 | Error while setting up Meshery Dev Environment in Windows
- Jun 15 | Where I can find the code of Layer5 Cloud ui?
- Jun 13 | Meshery Build and Release Meeting | June 13th 2024
- Jun 10 | Error while setting up local dev environment for docker desktop extension
- Jun 07 | Unable to deploy Meshery Adapters
- Jun 07 | Looking for a meshmate to help me with Docker extension development
- Jun 04 | Error on terminal when I ran `mesheryctl system start`
- Jun 04 | How to setup Meshery Operator for local machine
- Jun 05 | Meshery Development Meeting | July 5th 2024