Publication

TLS decryption in Software Interrupt context in the Linux kernel

2026

Abstract

TLS is a cornerstone of modern communication and can be offloaded to the kernel using the kTLS module. However, kTLS operates decryption in process context, creating a bottleneck when a single application thread handles multiple high-throughput connections. We explore moving the decryption to the softirq context with three different implementation choices and show it can significantly improve throughput.

Official source

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

TLS decryption in Software Interrupt context in the Linux kernel

Chat with Graph Search

Altruistic Batching: Slowing Down the Network Stack to Go Faster

Gaussian processes and other kernel methods

Composite Kernel Learning