Memcache SSL Session Cache

I noticed in the ngx_http_ssl_module there’s an option to perform SSL
session caching
using either OpenSSL’s built-in cache, or a shared cache. While
OpenSSL’s built-in
cache works with only a single worker, the shared cache can be used by
all the worker
processes.

I was wondering if there are any plans to make a Memcache SSL Session
cache that
could be used my all worker processes, between different servers in a
cluster?

Currently Apache’s mod_ssl has a Memcache SSL cache, and it comes in
quite handy when
you are clustering multiple servers behind a load balancer. That’s
because you don’t
have to maintain any “SSL sticky” sessions where subsequent requests
are routed by the
LB to the same server after the initial handshake. Using Memcache any
server in the
cluster could handle the SSL session seamlessly so load can be more
evenly distributed
with less processing up-front by the LB.

Prior to mod_ssl adding a Memcache SSL cache, it actually had a
distributed session
cache system since 2004 called distcache. The main problem with that
approach was
that the distcache server still represented a single point of failure
unlike memcache
which can have the sessions cached across multiple servers. Of course
if the server
that has the session you want goes down the server still needs to re-
negotiate the SSL
connection, but at least you haven’t lost all of the cached sessions.

Thanks,

Dan

This forum is not affiliated to the Ruby language, Ruby on Rails framework, nor any Ruby applications discussed here.

| Privacy Policy | Terms of Service | Remote Ruby Jobs