Over the last year, Netflix has been transitioning from HTTP to HTTPS for its customers' streams. The process hasn't been simple. The company indicates that the computational costs to its serving platform from this move have been significant. To reduce the operational costs of encrypting all streams, Netflix has exploring new ways of optimizing Transport Layer Security (TLS) bulk encryption. In a recent paper, Netflix's engineers explain what they've been able to accomplish.
First, the engineers considered different options for Netflix's cipher. They opted for the AES-GCM cipher over the more common Cipher Block Chaining, deciding that GCM provided adequate protection while requiring less processsing and computation. Second, Netflix considered a number of options for implementing the cipher, eventually settling on a modified version of the Intel Intelligent Storage Acceleration Library (ISA-L). With some additional improvements to the data path, Netflix reports that it was able to improve overall performance as much as 30%.
The report suggests a few possibilities that Netflix's engineers are still considering. The company wonders whether a dedicated auxiliary card could handle the encryption instructions more efficiently than its servers' CPUs, and it's also looking into the cache-control features of Intel's CPUs for ways of limiting the amount of data put into last-layer caches during the encryption process. Still, Netflix is happy enough with its results that it expects to have TLS encryption for the majority of its customers' streams by the end of this year.
|AMD says its Vega cards will launch "over the next couple of months"||78|
|Samsung's high-end Chromebook Pro will be available May 28||19|
|GeForce 382.33 drivers are ready for a match of Tekken 7||0|
|HP upgrades Envy and Spectre x2 laptop lineups||26|
|Asus ROG Strix X370-F and B350-F mobos take wing||4|
|MSI debuts slot-powered Radeon RX 560 Aero ITX OC cards||16|
|Lian-Li PC-O12WX puts graphics cards under glass||7|
|Asus B250I Gaming brings ROG Strix bling at a lower price||17|
|Lenovo Legion Y920 is a mobile gaming beast||14|