area/tlshelp wanted
Repository metrics
- Stars
- (27,997 stars)
- PR merge metrics
- (Avg merge 8d) (378 merged PRs in 30d)
Description
Title: Kernel TLS Offload (kTLS) support in Envoy
Description:
kTLS was added into the kernel lately and it enables high performance use cases such as using sendfile to send data. It also supports potential hardware/NIC offloads to make things even faster. It would be really nice to have this feature in Envoy also. I looked up previous issues and found ~2 issues briefly mentioning kTLS, but the discussions didn't advance further. I'm wondering whether there are plans to support this?
I thought about it and maybe we can have an IoHandle abstraction that hides away the kTLS offloading, or maybe integrate it into the transport socket... 🤔
[optional Relevant Links:]
- kTLS documentation: https://docs.kernel.org/networking/tls-offload.html
- original issue that mentioned kTLS: https://github.com/envoyproxy/envoy/issues/5620
- NGINX kTLS experiment: https://www.nginx.com/blog/improving-nginx-performance-with-kernel-tls/
- Netflix slides: http://nabstreamingsummit.com/wp-content/uploads/2022/05/2022-Streaming-Summit-Netflix.pdf