Detailed HTTPS acceleration principle

What is HTTPS?

HTTP is called Hypertext Transfer Protocol, using TCP port 80, by default the data is transmitted in clear text, the data can be captured through the capture tool, so on Interner, some of the more important sites of the HTTP server need to use PKI (Public Key Infrastructure) technology to encrypt data! This is also the HTTPS;

HTTPS is called a secure Hypertext Transfer protocol, using TCP port 443, his data will be encrypted with the public key in the PKI, so that the packet caught by the capture tool is not able to see the contents of the package, security greatly improved, to decrypt the data will be used in the PKI private key. So some high security sites such as: Online Banking, e-commerce sites are required to use HTTPS access!

Introduction and advantages of HTTPS acceleration.

HTTPS is a combination of Hypertext Transfer Protocol and SSL/TLS, is a secure HTTP acceleration, but due to SSL encryption algorithm and password can cause server CPU resource bottleneck, reduce server performance. HTTPS acceleration with PLCDN solves this problem by providing an accelerator service on each PLCDN node through a dedicated encryption and decryption device, then encrypting the content requested by the user before requesting the nearest node, where the node decrypts the user's request based on a dedicated private key. Reduce the authentication pressure of the source server, finally return to the end user, HTTPS acceleration not only provides the user the good access process, but also guarantees the data security.

HTTPS Accelerating Benefits:

Security: The request process is encrypted to ensure the security of the data;

Convenient: The acceleration process is completely transparent to both the client and the server, and the CDN cache rules can be customized;

Efficient: high-quality nodes all over the country, dedicated encryption, decryption acceleration equipment, reduce the source station certification pressure;

Stability: Self-owned health check function, found that the fault can be intelligent directed to the health and safety of the node;

Fast: With SSD SSD, the performance is stable and the request is faster than other hard disk drives.

Use HTTPS before accelerating

1, the website's information service coverage is wide, the browsing volume is large, the user is scattered, the website source server cannot get the ideal response speed.

2, in the face of traffic emergencies, the site is easy to become the target of hacker attacks, Web site security is under threat.

3, distributed in the engine room of the source server, if some of the server failure, some users of the request can not be normal response.

Use HTTPS after acceleration

1, through the Network Load Balancing technology, the user's request directed to the nearest node, so that users achieve near access.

2, the user request process is encrypted, and then the node will be used to decrypt the private key to return to the user, the security of the site is guaranteed.

3, the intelligent failover between the node and the server, can effectively avoid the server failure caused by the site can not respond to the situation occurs.

GDCA has been to "build network trust system to serve the modern digital life" purpose, is committed to providing a global digital certificate certification services. It has passed WebTrust's international certification and is a trusted certificate issuing authority worldwide. Its own brand letter Trustauth SSL certificate and its agent international famous brand: GlobalSign, Symantec, GeoTrust SSL certificate. GDCA Professional technical Team will provide the best product selection advice according to the user's specific situation, and provide professional corresponding HTTPS solution for different application or server requirements. For enterprises involved in the Internet to create a more secure ecological environment, the establishment of a more credible corporate website image.

Article reproduced https://www.trustauth.cn/wiki/9642.html

Detailed HTTPS acceleration principle