SlideShare a Scribd company logo
1 of 4
SSL-TLS Certificate Lookup
Optimizations for SSL-TLS Certificate Lookup
SSL-TLS Certificate Lookup
Introduction
Withsteadyincrease in mobility sector,therehasdemandinencryptingdatasharedbetweenWeb
clientandserver.Thisalsohasto leadto increase indemandfornetworkvisibilityforsecurity
monitoringandInline performance analysiswithQualityof service fordesiredcontents.The SSLproxy
solutionhelpsvendorstoachieve the same atdemandingline ratesof 20Gbit/secwithsustaining
connectionrate fordemandinguse cases.
For servicingthishuge connectionrate;optimizationinSSLdatais necessary.Deployingsolutionon
multicore withHardware acceleratedPKI,RNGandCrypto operationinproxyhasitschallenges. One
such challenge tolookupthe proxygeneratedcertificatesatconnectionrates30000 connections/secfor
keysizesof 1024 and more.
Abstract
Thiswhite paperexaminesvariousoptimizationsdone tobuildanefficient certificatelookupinthe SSL
proxyrunningonmulticore solutionsasthreads(perprocessingcore). Note certificate cachingand
cleanupisexecutedbystandalonethread,whilelookupcanbe triggeredbySSL proxythreads.
SSL-TLS Certificate Lookup
Issue
For SSL proxy instance oneachthreadhas issue proxycertificate containingthe original detailsof master
certificate like SubjectkeyIdentifier,BasicConstraints,KeyUsage,IssuerIdentifier,Extensionsetc…
Basedon certificate cachingpreviouslygeneratedyetvalidcertificate canbe reused.
Followingreasonscanadverselyaffect lookup performance
1. Concurrentconnectiontowebservercanleadto similarproxycertificate generatedperthread.
2. Duringpeakcertificate addtocache, not all certificate canbe addedfromspare tile leadingto
false positive.
3. Spare cache fill uponeach threadcan leadto drop to addnew certificate leadinglookup
failures.
4. Same certificate mightbe used informultipleIPof web servers(DNSallow same service to
available forsame webservercontent). GeneratingandCache perIPwill be costlyandmemory
hogging.
5. Each certificate are unique bycertificate IssuerandSubjectname.
6. Certificate revocationonexistingcache lookupleadstoinvalidandthere flushof contents.
7. Lookupfor certificate istime bounded,increase intime complexitywillbe TLS-SSLproxy
connectiontermination.
Solution
To addressabove issuesfollowingideaswere developedfromgroundup tosupportfasterlookup
1. Employed2lookups,i.e.:MasterCache Lookupand PerThreadSpare Cache Lookup.
2. Addedfieldscertificate descriptorforvalidationof expiry,serial,digestetc…
3. EmployedIPIndex arraywithSubject-Unique IdentifierHashtable toreduce collision and
numberof entries.
4. Made use of RR of fixedentriesfetchforcache add.
5. UsedHardware specificatomictosetstatesfor validbool state andinuse counter.
6. Use of vector ISA reducestime incalculatinghashesandindexforlookup.
SSL-TLS Certificate Lookup
Application
Future Roadmap
 Port the solutionfromRISCmulticore toMIPS,PPCand ARMsolutionsforSSLproxy.
Conclusion
Utilizingmulticoreandoptimizationtechniquesspecifictothe probleminhand;we were able to
accelerate certificate lookupwith resultoriented optimizations.
1600 950 625
8000
2400 2970
30000
12000
7500
0
5000
10000
15000
20000
25000
30000
35000
1024 2048 4096
CONNECTIONSPERSEC
KEYSIZES
Performance Comparison
Linked List Array Hash Array

More Related Content

What's hot

Realizing Exabyte-scale PM Centric Architectures and Memory Fabrics
Realizing Exabyte-scale PM Centric Architectures and Memory FabricsRealizing Exabyte-scale PM Centric Architectures and Memory Fabrics
Realizing Exabyte-scale PM Centric Architectures and Memory Fabrics
inside-BigData.com
 
The HPE Machine and Gen-Z - BUD17-503
The HPE Machine and Gen-Z - BUD17-503The HPE Machine and Gen-Z - BUD17-503
The HPE Machine and Gen-Z - BUD17-503
Linaro
 
RDMA on ARM
RDMA on ARMRDMA on ARM
RDMA on ARM
inside-BigData.com
 

What's hot (20)

micro-ROS: Developing ROS 2 professional applications based on MCUs
micro-ROS: Developing ROS 2 professional applications based on MCUsmicro-ROS: Developing ROS 2 professional applications based on MCUs
micro-ROS: Developing ROS 2 professional applications based on MCUs
 
State of ARM-based HPC
State of ARM-based HPCState of ARM-based HPC
State of ARM-based HPC
 
CUDA-Python and RAPIDS for blazing fast scientific computing
CUDA-Python and RAPIDS for blazing fast scientific computingCUDA-Python and RAPIDS for blazing fast scientific computing
CUDA-Python and RAPIDS for blazing fast scientific computing
 
The Power of SmartNICs
The Power of SmartNICsThe Power of SmartNICs
The Power of SmartNICs
 
micro-ROS goes easy: Developing professional applications using Eclipse based...
micro-ROS goes easy: Developing professional applications using Eclipse based...micro-ROS goes easy: Developing professional applications using Eclipse based...
micro-ROS goes easy: Developing professional applications using Eclipse based...
 
Realizing Exabyte-scale PM Centric Architectures and Memory Fabrics
Realizing Exabyte-scale PM Centric Architectures and Memory FabricsRealizing Exabyte-scale PM Centric Architectures and Memory Fabrics
Realizing Exabyte-scale PM Centric Architectures and Memory Fabrics
 
6WINDGate™ - Powering the New Generation of Network Appliances
6WINDGate™ - Powering the New Generation of Network Appliances6WINDGate™ - Powering the New Generation of Network Appliances
6WINDGate™ - Powering the New Generation of Network Appliances
 
Cloud Networking Trends
Cloud Networking TrendsCloud Networking Trends
Cloud Networking Trends
 
The HPE Machine and Gen-Z - BUD17-503
The HPE Machine and Gen-Z - BUD17-503The HPE Machine and Gen-Z - BUD17-503
The HPE Machine and Gen-Z - BUD17-503
 
How to Achieve High-Performance, Scalable and Distributed DNN Training on Mod...
How to Achieve High-Performance, Scalable and Distributed DNN Training on Mod...How to Achieve High-Performance, Scalable and Distributed DNN Training on Mod...
How to Achieve High-Performance, Scalable and Distributed DNN Training on Mod...
 
6WINDGate™ - Powering the New-Generation of IPsec Gateways
6WINDGate™ - Powering the New-Generation of IPsec Gateways6WINDGate™ - Powering the New-Generation of IPsec Gateways
6WINDGate™ - Powering the New-Generation of IPsec Gateways
 
Transtec nice webinar v2
Transtec nice webinar v2Transtec nice webinar v2
Transtec nice webinar v2
 
La visualisation 3D distante sans compromis avec NICE DCV
La visualisation 3D distante sans compromis avec NICE DCVLa visualisation 3D distante sans compromis avec NICE DCV
La visualisation 3D distante sans compromis avec NICE DCV
 
Learning from ZFS to Scale Storage on and under Containers
Learning from ZFS to Scale Storage on and under ContainersLearning from ZFS to Scale Storage on and under Containers
Learning from ZFS to Scale Storage on and under Containers
 
micro-ROS - New client library and middleware features
micro-ROS - New client library and middleware featuresmicro-ROS - New client library and middleware features
micro-ROS - New client library and middleware features
 
Inside Microsoft's FPGA-Based Configurable Cloud
Inside Microsoft's FPGA-Based Configurable CloudInside Microsoft's FPGA-Based Configurable Cloud
Inside Microsoft's FPGA-Based Configurable Cloud
 
DDS Advanced Tutorial - OMG June 2013 Berlin Meeting
DDS Advanced Tutorial - OMG June 2013 Berlin MeetingDDS Advanced Tutorial - OMG June 2013 Berlin Meeting
DDS Advanced Tutorial - OMG June 2013 Berlin Meeting
 
RDMA on ARM
RDMA on ARMRDMA on ARM
RDMA on ARM
 
Mellanox Announces HDR 200 Gb/s InfiniBand Solutions
Mellanox Announces HDR 200 Gb/s InfiniBand SolutionsMellanox Announces HDR 200 Gb/s InfiniBand Solutions
Mellanox Announces HDR 200 Gb/s InfiniBand Solutions
 
Deployment of Juniper Contrail in AVG Technologies
Deployment of Juniper Contrail in AVG TechnologiesDeployment of Juniper Contrail in AVG Technologies
Deployment of Juniper Contrail in AVG Technologies
 

Similar to Optimizations for ssl tls certificate lookup

SightSpeed Video Messenger
SightSpeed Video MessengerSightSpeed Video Messenger
SightSpeed Video Messenger
Videoguy
 
Performance Analysis of TLS Web Servers
Performance Analysis of TLS Web ServersPerformance Analysis of TLS Web Servers
Performance Analysis of TLS Web Servers
webhostingguy
 
Rl net scaler-ha&dr_xendesktop_set2012
Rl   net scaler-ha&dr_xendesktop_set2012Rl   net scaler-ha&dr_xendesktop_set2012
Rl net scaler-ha&dr_xendesktop_set2012
Rui Lopes
 

Similar to Optimizations for ssl tls certificate lookup (20)

Optimizations for ssl tls certificate caching on multicore
Optimizations for ssl tls certificate caching on multicoreOptimizations for ssl tls certificate caching on multicore
Optimizations for ssl tls certificate caching on multicore
 
KempHLB
KempHLBKempHLB
KempHLB
 
SightSpeed Video Messenger
SightSpeed Video MessengerSightSpeed Video Messenger
SightSpeed Video Messenger
 
Fast i pv4 lookup using local memory
Fast i pv4 lookup using local memoryFast i pv4 lookup using local memory
Fast i pv4 lookup using local memory
 
Performance Analysis of TLS Web Servers
Performance Analysis of TLS Web ServersPerformance Analysis of TLS Web Servers
Performance Analysis of TLS Web Servers
 
NetScaler 11 Update
NetScaler 11 UpdateNetScaler 11 Update
NetScaler 11 Update
 
Citrix NetScaler SD-WAN - What’s New, What’s Hot?
Citrix NetScaler SD-WAN - What’s New, What’s Hot?Citrix NetScaler SD-WAN - What’s New, What’s Hot?
Citrix NetScaler SD-WAN - What’s New, What’s Hot?
 
Citrix Day 2014: NetScaler 10.5
Citrix Day 2014: NetScaler 10.5Citrix Day 2014: NetScaler 10.5
Citrix Day 2014: NetScaler 10.5
 
A Comparative Research on SSL VPN and IPSec VPN
A Comparative Research on SSL VPN and IPSec VPNA Comparative Research on SSL VPN and IPSec VPN
A Comparative Research on SSL VPN and IPSec VPN
 
The ROI of Application Delivery Controllers in Traditional and Virtualized En...
The ROI of Application Delivery Controllers in Traditional and Virtualized En...The ROI of Application Delivery Controllers in Traditional and Virtualized En...
The ROI of Application Delivery Controllers in Traditional and Virtualized En...
 
What is SSL ? The Secure Sockets Layer (SSL) Protocol
What is SSL ? The Secure Sockets Layer (SSL) ProtocolWhat is SSL ? The Secure Sockets Layer (SSL) Protocol
What is SSL ? The Secure Sockets Layer (SSL) Protocol
 
Securing TCP connections using SSL
Securing TCP connections using SSLSecuring TCP connections using SSL
Securing TCP connections using SSL
 
Rl net scaler-ha&dr_xendesktop_set2012
Rl   net scaler-ha&dr_xendesktop_set2012Rl   net scaler-ha&dr_xendesktop_set2012
Rl net scaler-ha&dr_xendesktop_set2012
 
Sequere socket Layer
Sequere socket LayerSequere socket Layer
Sequere socket Layer
 
SSL-image
SSL-imageSSL-image
SSL-image
 
IoT Secure Bootsrapping : ideas
IoT Secure Bootsrapping : ideasIoT Secure Bootsrapping : ideas
IoT Secure Bootsrapping : ideas
 
DANE and Application Uses of DNSSEC
DANE and Application Uses of DNSSECDANE and Application Uses of DNSSEC
DANE and Application Uses of DNSSEC
 
IBM MQ V8 Security: Latest Features Deep-Dive
IBM MQ V8 Security: Latest Features Deep-DiveIBM MQ V8 Security: Latest Features Deep-Dive
IBM MQ V8 Security: Latest Features Deep-Dive
 
White paper - Full SSL automation with OneClickSSL
White paper - Full SSL automation with OneClickSSLWhite paper - Full SSL automation with OneClickSSL
White paper - Full SSL automation with OneClickSSL
 
DockerCon Live 2020 - Securing Your Containerized Application with NGINX
DockerCon Live 2020 - Securing Your Containerized Application with NGINXDockerCon Live 2020 - Securing Your Containerized Application with NGINX
DockerCon Live 2020 - Securing Your Containerized Application with NGINX
 

Recently uploaded

introduction-to-automotive Andoid os-csimmonds-ndctechtown-2021.pdf
introduction-to-automotive Andoid os-csimmonds-ndctechtown-2021.pdfintroduction-to-automotive Andoid os-csimmonds-ndctechtown-2021.pdf
introduction-to-automotive Andoid os-csimmonds-ndctechtown-2021.pdf
VishalKumarJha10
 
%+27788225528 love spells in Colorado Springs Psychic Readings, Attraction sp...
%+27788225528 love spells in Colorado Springs Psychic Readings, Attraction sp...%+27788225528 love spells in Colorado Springs Psychic Readings, Attraction sp...
%+27788225528 love spells in Colorado Springs Psychic Readings, Attraction sp...
masabamasaba
 
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
masabamasaba
 
AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
AI Mastery 201: Elevating Your Workflow with Advanced LLM TechniquesAI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
VictorSzoltysek
 
+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...
+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...
+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...
Health
 

Recently uploaded (20)

Crypto Cloud Review - How To Earn Up To $500 Per DAY Of Bitcoin 100% On AutoP...
Crypto Cloud Review - How To Earn Up To $500 Per DAY Of Bitcoin 100% On AutoP...Crypto Cloud Review - How To Earn Up To $500 Per DAY Of Bitcoin 100% On AutoP...
Crypto Cloud Review - How To Earn Up To $500 Per DAY Of Bitcoin 100% On AutoP...
 
introduction-to-automotive Andoid os-csimmonds-ndctechtown-2021.pdf
introduction-to-automotive Andoid os-csimmonds-ndctechtown-2021.pdfintroduction-to-automotive Andoid os-csimmonds-ndctechtown-2021.pdf
introduction-to-automotive Andoid os-csimmonds-ndctechtown-2021.pdf
 
%in Midrand+277-882-255-28 abortion pills for sale in midrand
%in Midrand+277-882-255-28 abortion pills for sale in midrand%in Midrand+277-882-255-28 abortion pills for sale in midrand
%in Midrand+277-882-255-28 abortion pills for sale in midrand
 
%+27788225528 love spells in Colorado Springs Psychic Readings, Attraction sp...
%+27788225528 love spells in Colorado Springs Psychic Readings, Attraction sp...%+27788225528 love spells in Colorado Springs Psychic Readings, Attraction sp...
%+27788225528 love spells in Colorado Springs Psychic Readings, Attraction sp...
 
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
%+27788225528 love spells in Atlanta Psychic Readings, Attraction spells,Brin...
 
Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...
Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...
Reassessing the Bedrock of Clinical Function Models: An Examination of Large ...
 
Chinsurah Escorts ☎️8617697112 Starting From 5K to 15K High Profile Escorts ...
Chinsurah Escorts ☎️8617697112  Starting From 5K to 15K High Profile Escorts ...Chinsurah Escorts ☎️8617697112  Starting From 5K to 15K High Profile Escorts ...
Chinsurah Escorts ☎️8617697112 Starting From 5K to 15K High Profile Escorts ...
 
%+27788225528 love spells in Vancouver Psychic Readings, Attraction spells,Br...
%+27788225528 love spells in Vancouver Psychic Readings, Attraction spells,Br...%+27788225528 love spells in Vancouver Psychic Readings, Attraction spells,Br...
%+27788225528 love spells in Vancouver Psychic Readings, Attraction spells,Br...
 
AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
AI Mastery 201: Elevating Your Workflow with Advanced LLM TechniquesAI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques
 
%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain
%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain
%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain
 
Software Quality Assurance Interview Questions
Software Quality Assurance Interview QuestionsSoftware Quality Assurance Interview Questions
Software Quality Assurance Interview Questions
 
+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...
+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...
+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...
 
8257 interfacing 2 in microprocessor for btech students
8257 interfacing 2 in microprocessor for btech students8257 interfacing 2 in microprocessor for btech students
8257 interfacing 2 in microprocessor for btech students
 
%in kempton park+277-882-255-28 abortion pills for sale in kempton park
%in kempton park+277-882-255-28 abortion pills for sale in kempton park %in kempton park+277-882-255-28 abortion pills for sale in kempton park
%in kempton park+277-882-255-28 abortion pills for sale in kempton park
 
Direct Style Effect Systems - The Print[A] Example - A Comprehension Aid
Direct Style Effect Systems -The Print[A] Example- A Comprehension AidDirect Style Effect Systems -The Print[A] Example- A Comprehension Aid
Direct Style Effect Systems - The Print[A] Example - A Comprehension Aid
 
The Top App Development Trends Shaping the Industry in 2024-25 .pdf
The Top App Development Trends Shaping the Industry in 2024-25 .pdfThe Top App Development Trends Shaping the Industry in 2024-25 .pdf
The Top App Development Trends Shaping the Industry in 2024-25 .pdf
 
SHRMPro HRMS Software Solutions Presentation
SHRMPro HRMS Software Solutions PresentationSHRMPro HRMS Software Solutions Presentation
SHRMPro HRMS Software Solutions Presentation
 
call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️
call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️
call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️
 
Microsoft AI Transformation Partner Playbook.pdf
Microsoft AI Transformation Partner Playbook.pdfMicrosoft AI Transformation Partner Playbook.pdf
Microsoft AI Transformation Partner Playbook.pdf
 
%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein
%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein
%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein
 

Optimizations for ssl tls certificate lookup

  • 1. SSL-TLS Certificate Lookup Optimizations for SSL-TLS Certificate Lookup
  • 2. SSL-TLS Certificate Lookup Introduction Withsteadyincrease in mobility sector,therehasdemandinencryptingdatasharedbetweenWeb clientandserver.Thisalsohasto leadto increase indemandfornetworkvisibilityforsecurity monitoringandInline performance analysiswithQualityof service fordesiredcontents.The SSLproxy solutionhelpsvendorstoachieve the same atdemandingline ratesof 20Gbit/secwithsustaining connectionrate fordemandinguse cases. For servicingthishuge connectionrate;optimizationinSSLdatais necessary.Deployingsolutionon multicore withHardware acceleratedPKI,RNGandCrypto operationinproxyhasitschallenges. One such challenge tolookupthe proxygeneratedcertificatesatconnectionrates30000 connections/secfor keysizesof 1024 and more. Abstract Thiswhite paperexaminesvariousoptimizationsdone tobuildanefficient certificatelookupinthe SSL proxyrunningonmulticore solutionsasthreads(perprocessingcore). Note certificate cachingand cleanupisexecutedbystandalonethread,whilelookupcanbe triggeredbySSL proxythreads.
  • 3. SSL-TLS Certificate Lookup Issue For SSL proxy instance oneachthreadhas issue proxycertificate containingthe original detailsof master certificate like SubjectkeyIdentifier,BasicConstraints,KeyUsage,IssuerIdentifier,Extensionsetc… Basedon certificate cachingpreviouslygeneratedyetvalidcertificate canbe reused. Followingreasonscanadverselyaffect lookup performance 1. Concurrentconnectiontowebservercanleadto similarproxycertificate generatedperthread. 2. Duringpeakcertificate addtocache, not all certificate canbe addedfromspare tile leadingto false positive. 3. Spare cache fill uponeach threadcan leadto drop to addnew certificate leadinglookup failures. 4. Same certificate mightbe used informultipleIPof web servers(DNSallow same service to available forsame webservercontent). GeneratingandCache perIPwill be costlyandmemory hogging. 5. Each certificate are unique bycertificate IssuerandSubjectname. 6. Certificate revocationonexistingcache lookupleadstoinvalidandthere flushof contents. 7. Lookupfor certificate istime bounded,increase intime complexitywillbe TLS-SSLproxy connectiontermination. Solution To addressabove issuesfollowingideaswere developedfromgroundup tosupportfasterlookup 1. Employed2lookups,i.e.:MasterCache Lookupand PerThreadSpare Cache Lookup. 2. Addedfieldscertificate descriptorforvalidationof expiry,serial,digestetc… 3. EmployedIPIndex arraywithSubject-Unique IdentifierHashtable toreduce collision and numberof entries. 4. Made use of RR of fixedentriesfetchforcache add. 5. UsedHardware specificatomictosetstatesfor validbool state andinuse counter. 6. Use of vector ISA reducestime incalculatinghashesandindexforlookup.
  • 4. SSL-TLS Certificate Lookup Application Future Roadmap  Port the solutionfromRISCmulticore toMIPS,PPCand ARMsolutionsforSSLproxy. Conclusion Utilizingmulticoreandoptimizationtechniquesspecifictothe probleminhand;we were able to accelerate certificate lookupwith resultoriented optimizations. 1600 950 625 8000 2400 2970 30000 12000 7500 0 5000 10000 15000 20000 25000 30000 35000 1024 2048 4096 CONNECTIONSPERSEC KEYSIZES Performance Comparison Linked List Array Hash Array