NDLI: The impact of TLS on SIP server performance: measurement and modeling

Content Provider	ACM Digital Library
Author	Nahum, Erich Schulzrinne, Henning Wright, Charles P. Shen, Charles
Copyright Year	2012
Abstract	Securing Voice over IP (VoIP) is a crucial requirement for its successful adoption. A key component of this is securing the signaling path, which is performed by the Session Initiation Protocol (SIP). Securing SIP can be accomplished by using Transport Layer Security (TLS) instead of UDP as the transport protocol. However, using TLS for SIP is not yet widespread, perhaps due to concerns about the performance overhead. This paper studies the performance impact of using TLS as a transport protocol for SIP servers. We evaluate the cost of TLS experimentally using a testbed with OpenSIPS, OpenSSL, and Linux running on an Intel-based server. We analyze TLS costs using application, library, and kernel profiling and use the profiles to illustrate when and how different costs are incurred. We show that using TLS can reduce performance by up to a factor of 17 compared to the typical case of SIP-over-UDP. The primary factor in determining performance is whether and how TLS connection establishment is performed due to the heavy costs of RSA operations used for session negotiation. This depends both on how the SIP proxy is deployed and what TLS operation modes are used. The cost of symmetric key operations such as AES, in contrast, tends to be small. Network operators deploying SIP-over-TLS should attempt tomaximize the persistence of secure connections and will need to assess the server resources required. To aid them, we provide ameasurement-driven cost model for use in provisioning SIP servers using TLS. Our cost model predicts performance within 15% on average.
Starting Page	1217
Ending Page	1230
Page Count	14
File Format	PDF
ISSN	10636692
DOI	10.1109/TNET.2011.2180922
Volume Number	20
Issue Number	4
Journal	IEEE/ACM Transactions on Networking (TON)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2012-08-01
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Computer networks Internet telephony Performance evaluation Security
Content Type	Text
Resource Type	Article
Subject	Electrical and Electronic Engineering Computer Networks and Communications Software Computer Science Applications

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

The Impact of TLS on SIP Server Performance: Measurement and Modeling

Terminating telephony services on the internet

Design, implementation, and performance of a load balancer for SIP server clusters

Evaluating SIP server performance

Constructing internet coordinate system based on delay measurement

A report on the Eu's 1st Project GEMINI

On the impact of TCP and per-flow scheduling on internet performance

Integrating communication services

The impact of TLS on SIP server performance

The impact of TLS on SIP server performance: measurement and modeling

Similar Documents

The Impact of TLS on SIP Server Performance: Measurement and Modeling

Terminating telephony services on the internet

Design, implementation, and performance of a load balancer for SIP server clusters

Evaluating SIP server performance

Constructing internet coordinate system based on delay measurement

A report on the Eu's 1st Project GEMINI

On the impact of TCP and per-flow scheduling on internet performance

Integrating communication services

The impact of TLS on SIP server performance

The impact of TLS on SIP server performance: measurement and modeling