Re: Authenticated UDP

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


SSL is stateless and can operate on any transport layer you choose. Im pretty certain that SSL can be used to authenticate but not encrypt if you find a SSL stack that allows access at that level. But lower down you want encryption anyway...

That is interesting, i wasn't aware of SSL applied to anything except TCP
(didn't even think of it, I guess it's a sideffect of the web-centric world
we live in)... I need to investigate this.

I realize TCP would be ideal for this, but I have to deal with a large
number of very transient connections (~ 1000/min, lasting few hundred
milliseconds at most) and I found TCP can easily bog down the server and get
starved of sockets.. especially since this is not the primary task of the
server, and it also needs to service a separate set of HTTP requests.

TCP sockets do tend to close quickly when closed normally. [...]



Just by looking at my server in a production environment, I see a very large
number of sockets in use, specially when the web server part begins to get
bogged down and connections end up in the server queue waiting to be
processed. Of course, I could solve the problem by separating the different
tasks on different hardware, but customers do not like it when you add cost
to the solution. :)

Furthermore, my UDP based communication is small -- it does not span
multiple packets that need tobe assembled by the protocol, it is not ordering
sensitive, etc. it is simply a command packet that I need to somehow
authenticate.


.

Relevant Pages

  • Reliability of Java, sockets and TCP transmissions
    ... I am writing client and server components of an application that communicate using Socket, ServerSocket and TCP. ... So far I have only been able to run the application where the client and server are on the same local machine or separated by an intranet/LAN so I have no results of an internet deployment to report but I have not encountered any IO errors to this point. ... I mean do I need to implement some kind of "advanced" protocol whereby check sums are transmitted along with packets and the packet retransmitted if the check sum is invalid or is all this handled by either the Java sockets or the TCP protocol already? ...
    (comp.lang.java.programmer)
  • Re: Internal TCP/IP send buffer?
    ... and that has to be decided at your proxy server. ... UDP or a separate TCP connection to the target and periodically ... connections) constitutes a completely different source of latency. ...
    (microsoft.public.win32.programmer.networks)
  • Re: Netzwerkproblem GBit -> 100MBit
    ... GBit-Kette - flow control zwingend notwendig sei. ... zwischen Client und Server. ... Das kann TCP an der Stelle nicht mehr leisten. ...
    (de.comp.sys.novell)
  • Re: [opensuse] Need help with NFS
    ... each with both a server and a client. ... there is an error message: "Unable to mount the NFS entries ... 100000 4 tcp 111 portmapper ... 100000 4 udp 111 portmapper ...
    (SuSE)
  • Re: [opensuse] Need help with NFS
    ... When I close the window Yast> Network Services> NFS Client in poblano, ... 100000 4 tcp 111 portmapper ... 100000 4 udp 111 portmapper ... ensure the Yast2 -NFS Server is installed. ...
    (SuSE)