Wednesday, July 22, 2015

H2O version 1.4.0 released with outstanding support for forward secrecy and load balancing (and the experimental mruby handler)

Today I am happy to announce the release of the H2O HTTP/2 server version 1.4.0.

There have been a few changes and bug fixes from version 1.3.1 (that showed big performance improvements over the older generations of HTTP servers without support for request prioritization), but the most prominent ones are the following.

Support for the PROXY protocol

The PROXY protocol is a de-facto standard protocol used by L4 load balancers (such as AWS Elastic Load Balancing) to notify the web servers running behind them the IP addresses of the clients. Support for the protocol is essential for running a web server behind such load balancer; without the support it is impossible to log the address of the client or to work against attacks.

In version 1.4.0, we have added support for the protocol which makes H2O a good choice for large scale and/or highly-available web sites running multiple HTTP servers behind a load balancer.

Support for cache-based and ticket-based TLS session resumption using Memcached (and forward secrecy)

The PROXY protocol is not the only thing that now makes H2O a good choice for such websites.

When running a HTTPS server cluster behind a L4 load balancer, it is desirable that the server supports session resumption using a shared datastore such as memcached.

TLS Session Resumption: Full-speed and Secure is a good read for those who are interested in what session resumption is; in short, it reduces the time spent for establishing a TLS connection to about half, and also reduces the CPU time to below 10%!

However, until now, front-end HTTP servers have been not good at supporting session resumption using a shared datastore.

Among the two resumption methods, Nginx does not support the more-widely-deployed cache-based session resumption using a shared datastore.

It should also be noted that most web servers are not good at supporting ticket-based resumption; they use 128-bit AES for storing master secrets (even in cases when a more complex ciphersuite is used), and also do not automatically roll-over the secrets (which botches forward-secrecy).

As pointed out by Tim Taubert, the sad state of the server-side TLS session resumption implementations has been the headache of administrators trying to setup secure websites. Forward Secrecy at Twitter is an example that shows how difficult it is to configure a website supporting forward-secrecy.

Being the primary developer of H2O, I believe that web servers should be easily configurable to be secure; so in version 1.4.0 we have implemented the following features:

  • cache-based session resumption using memcached
  • automatic rollover of master secret used for ticket-based resumption
  • synchronization of master secrets that rollover, using memcached
  • directive to configure the cipher used for encrypting tickets (with default being aes-256-cbc)

Table 1.Supported Methods of Session Resumption
Resumption Method
Session ResumptionSession Ticket
Apache (prefork)yesno forward-secrecy (AES-128)
Apache (worker)yesno forward-secrecy (AES-128)
Apache (event)not sharableno forward-secrecy (AES-128)
Nginxnot sharableno forward-secrecy (AES-128)
Varnish (hitch)needs recompileno
H2Oyesyes (AES-256)

And with H2O, they are easy to use! A simple configuration like below activates all the features. The H2O server cluster will share information of both cache-based and ticket-based session resumption using memcached, with complex cipher used for protecting master secrets that are automatically rolled over.

listen:
  port: 443
  ssl:
    key-file: /path/to/key-file
    certificate-file: /path/to/certificate-file
  proxy-protocol: ON
ssl-session-resumption:
  method: all
  memcached:
    host: address.of.memcached.server
    port: 11211

Please refer to the documentation for the details of the configuration directive.

Experimental mruby Handler

We are also proud to announce that we now have a scripting engine running within the H2O standalone server that can be used to customize the behavior, and that the programming language is Ruby.

Developed by Yukihiro Matz (the father of the Ruby programming language) and others, mruby is an implementation of the language for embedded use. Thanks to MATSUMOTO Ryosuke the language runtime can now be used to script how the HTTP requests should be handled within H2O.

The handler is still in very early stages and considered unstable (therefore it is not turned on by default, you would need to pass -DWITH_MRUBY=ON as an argument to CMake to build H2O with support for the mruby handler), but nevertheless it is already a great addition to the H2O HTTP server; such a scripting engine gives you great flexibility to customize the behavior of the server depending on the tiny aspects of a HTTP request, or to mitigate attacks.

Please refer to Ryosuke's weblog for more information (in Japanese). In addition to topics related to H2O, you can find excellent entries about how to use a scripting engine within web servers to work against cyber attacks.

Conclusion

All in all, we are happy to provide a new release of the H2O server to the public, that is secure and easy to use (with flexibility), once again raising the bar of what people should expect on a HTTP server to provide.

I hope you enjoy using the new release of H2O.

104 comments:

  1. They release a best version of H2O which is good for bug fixes. Here i also get detail knowledge of this version.
    Conference Application For iPhone

    ReplyDelete
  2. Hibernate and spring are the frameworks of Java. A java developer should be well aware of these frameworks in order to master the technology and work efficeiently.
    spring training in chennai | hibernate training in chennai
    FITA Academy reviews

    ReplyDelete
  3. Java is the most robust secured and multi threaded programming language which is the reason why most the the developers go for java. A single java code can be used for various platforms.
    JAVA training in chennai | java training institutes in chennai | FITA Academy Chennai

    ReplyDelete
  4. I like the Valuable Information you provide in your articles. I'll bookmark your weblog and check again here frequently. I am quite sure I will learn many new stuff right here! Best of luck for the next!
    independent financial advisor

    ReplyDelete
  5. Thanks for sharing this information in here. As a fresher any one can also go for the below training programs.
    CCNA Training in Chennai

    ReplyDelete
  6. Testing now a days has become as importnant as developing of an application. With the help of testing, we can find out the potential bugs which would affect the application. Fixing this at a very early stage would help the application to run without any problem.
    Software testing training in Chennai | Software testing training institute in Chennai | Software testing courses in Chennai

    ReplyDelete
  7. Spring is an open source framework which is mainly used in java applications that can be deployed in standalone platform.
    spring training in chennai | spring course in chennai

    ReplyDelete
  8. The blog you presented was very nice and interesting which helped me to get update on the recent technologies.
    Angularjs training in chennai | Angularjs course in Chennai

    ReplyDelete
  9. Thank you for sharing. I will definitely give this post to my helpdesk specialists https://jitbit.com/. Recently, we had a problem for a long time could not decide. This was the first issue behind year, when they solved the problem for so long. Good luck.

    ReplyDelete
  10. Lunch Links: Tennessee Approves Tax Cut, IRS Was More Helpful This Year, Outstanding Women in Tax Buy English Literature Essays

    ReplyDelete
  11. My Arcus offer java training with 100% placement. Our java training course that includes fundamentals and advance java training program with high priority jobs. java j2ee training with placement having more exposure in most of the industry nowadays in depth manner of java

    java training in chennai

    ReplyDelete
  12. we are offering best guidewire online training in hyderabad with job support and high quality training facilities and well expert faculty .
    Guidewire training in hyderabad

    ReplyDelete
  13. Thanks for sharing this information and keep updating us. This is informatics and really useful to me.

    JAVA Training Institute in Delhi | Web Development Training Company in Delhi | Big Data Training In Delhi

    ReplyDelete
  14. Nice to see your blog again, it has been months for me. Well this article I've been waiting for so long. I need this article to complete my assignment in the college, and it has the same topic with your article. Thanks, for sharing.
    Product Upload Services

    ReplyDelete
  15. Software engineers are approaching development and enterprise design in an entirely new way, thanks to the cloud. In this expert handbook, explore how your peers are leveraging the cloud to streamline app lifecycle management, save money, and make production and security more efficient. thanks for sharing it
    dissertation Writing Service

    ReplyDelete
  16. This comment has been removed by the author.

    ReplyDelete
  17. If you are looking for spring hibernate training institute in chennai then candid training is the best place to learn.

    Candid gives you best in class spring hibernate training with high quality and post training support, We provide you free demo session and candid promises the permanent trainer throughout your session and focus on more practical.

    candid training institute


    ReplyDelete
  18. Your details are very informative. I am interested to learn AngularJS Training in Chennai or AngularJS course in Chennai Do you have angular related post means kindly share with me.

    ReplyDelete
  19. Ethical hacking is a great career option, if you have the right aptitude and passion for it.When I first heard there is something called ethical hacking, and people get paid to do it, my eyes widened. How cool is that! Many of you must have thought the same thing when you crossed paths with this field.Make career in ethical hacking

    ReplyDelete
  20. Thank you for sharing this wonderful blog. It will help to improve my knowledge about JAVA frameworks. This blog will know more about JAVA concepts. Also, it will improve my programming skill.
    Spring Training in Chennai | Spring framework Training | Spring framework Certification | Spring Hibernate Training in Chennai

    ReplyDelete
  21. I have read this blog. Informative and useful. Thankyou for sharing such a good information.

    java training in chennai
    java training in bangalore
    java online training
    java training in pune

    ReplyDelete

  22. Thanks for sharining your post

    Here is STUCORNER the Best Mobile application training institute in Laxmi Nagar you can visit their site:
    Best Mobile application Training institute

    ReplyDelete
  23. Well! Learn from the certified network specialist at Trinity Learning to avail the right foundation in Networking.

    ReplyDelete

  24. I believe there are many more pleasurable opportunities ahead for individuals that looked at your site.

    Saraswati Accountants

    ReplyDelete
  25. The great service in this blog and the nice technology is visible in this blog. I am really very happy for the nice approach is visible in this blog and thank you very much for using the nice technology in this blog
    occupational health and safety course in chennai

    ReplyDelete
  26. Very well written blog and I always love to read blogs like these because they offer very good information to readers with very less amount of words....thanks for sharing your info with us and keep sharing.
    Java training in Chennai

    Java training in Bangalore

    ReplyDelete
  27. This comment has been removed by the author.

    ReplyDelete
  28. Outstanding blog thanks for sharing such wonderful blog with us ,after long time came across such knowlegeble blog. keep sharing such informative blog with us.

    Check out : machine learning workshops in chennai
    machine learning projects in chennai
    machine learning tution in chennai
    artificial intelligence and machine learning course in chennai

    ReplyDelete
  29. Angular framework is supported by google team. for creating responsive web design learn,

    angularjs training in chennai

    ReplyDelete
  30. Jsp is a front end web framework which is familiar among the java developer.

    jsp tutorial

    ReplyDelete
  31. Students need assignment experts. We provide many assignment experts to write your assignment. Our writers hold Master’s and Ph.D. digress from the top universities across the globe. Hire Now!

    ReplyDelete
  32. Mapping skills announces the best training program ,JAVA,MySQL,SAS,Salesforce,Sharepoint,Python,Cloud computing, Big Data Hadoop,Angular for B.Tech/BCA/BBA/MCA students with 100% placement for north Indian utilize your summer vacations with these Best courses.

    Free Digital marketing training in noida
    Free Digital marketing training in noida

    ReplyDelete
  33. Mapping skills announces the best training program ,JAVA,MySQL,SAS,Salesforce,Sharepoint,Python,Cloud computing, Big Data Hadoop,Angular for B.Tech/BCA/BBA/MCA students with 100% placement for north Indian utilize your summer vacations with these Best courses.

    Free Digital marketing training in noida

    ReplyDelete
  34. Thank you for posting such a great article! I found your website perfect for my needs. It contains wonderful and helpful posts.
    AllAssignmenthelp.com reviews

    ReplyDelete

  35. Thanks for sharing this information. I have shared this link with other keep posting such information to provide best in class law assignment help online at very affordable prices.

    Assignment help
    Assignment help
    Assignment help
    Python Programming Assignment
    Programming Assignment Experts
    Assignment help tutors
    Assignment help

    ReplyDelete
  36. Thanks for sharing the valuable information. In continuation of your excellent web post, I want to tell about a website (My Assignment Services) that provides assignment help services to students at cost effective prices. Whatever be your assignment, essay, reports, dissertation, their experts are sources of every problem that comes your way. They are not just limited to a single domain, instead they will guide you in every assignment related to nursing assignment help, management, engineering, nursing, law, and much more.
    My Assignment Services has been consistently delivering and fulfilling the demand of assignment across the world with their assignment help melbourne, Australia, UK, Malaysia, USA, Russia, Canada, UAE, South Africa, Vietnam, Singapore, etc. Whenever it comes to quality assignment help services at affordable prices with satisfied customer satisfaction rating, My Assignment Services would be a good name to call.

    ReplyDelete
  37. Nice Post. Thank you for sharing. Ready to submit your instant assignment help with the help of online assignment helper. Get services of Australiaassignmenthelp.com for help in your assignment. Hire best writing experts online now.

    ReplyDelete
  38. Thanks for sharing this information and keep updating us.it will really helpful for Career Growth.Really it was an awesome article.

    Salesforce training in Noida | Salesforce Consulting Partners | Salesforce Implementation Partner

    ReplyDelete
  39. It's quite interesting. the information you have shared with us is really useful. thank you so much for publishing WordPress Hosting for One Dollar keep this up.

    ReplyDelete
  40. Students who wants for homework for them we are continue giving best team and they can easily complete your work. So, students can collect top homework service easily. So students can get managerial accounting homework help searvice and get our best services from the professional experts of StudentsAssignmentHelp.com.

    ReplyDelete
  41. Australiaassignmenthelp.com has the best option for students are instance assignment help service online. Our experts finish your writing task in the proper format and structure the paper well according to your university rules.

    ReplyDelete
  42. Your information is absolutely correct and accurate. Thanks. assignment help

    ReplyDelete
  43. This comment has been removed by the author.

    ReplyDelete
  44. This comment has been removed by the author.

    ReplyDelete
  45. This comment has been removed by the author.

    ReplyDelete
  46. Excellent Blog. I really want to admire the quality of this post. I like the way of your presentation of ideas, views and valuable content. No doubt you are doing great work. I’ll be waiting for your next post. Thanks .Keep it up! Kindly visit us @ Wallet Box | Perfume Box Manufacturer
    Candle Packaging Boxes | Luxury Leather Box
    Luxury Clothes Box | Luxury Cosmetics Box
    Shoe Box Manufacturer | Luxury Watch Box

    ReplyDelete
  47. Wow, what an awesome spot to spend hours and hours! It's beautiful and I'm also surprised that you had it all to yourselves!
    Kindly visit us @ Best HIV Treatment in India | Top HIV Hospital in India
    HIV AIDS Treatment in Mumbai | HIV Specialist in Bangalore
    HIV Positive Treatment in India | Medicine for AIDS in India

    ReplyDelete
  48. The top Assignment help online
    service you have been looking for is here. Click here to find out the range of disciplines we would be happy to help you with.

    ReplyDelete
  49. Thanks for a nice share you have given to us with such an large collection of information.
    Great work you have done by sharing them to all. for more info
    simply superb.smart class in bhopal
    autocad in bhopal
    3ds max classes in bhopal
    CPCT Coaching in Bhopal
    java coaching in bhopal
    Autocad classes in bhopal
    Catia coaching in bhopal

    ReplyDelete

  50. Thanks for sharing valuable Information, I really very impressive on your blog. I hope you continue on blogging job. Learn English Fluently With The Guidance Of The Experts
    Do you want to speak English fluently and learn more about English Grammar from the experts? Taking the English Speaking Course is most amazing option to know everything about the language. The best English Speaking Course in Noida provides all the opportunities for self-grooming and professional growth.

    English Speaking Course In Noida

    Spoken English Classes in Noida

    Best English Training Institute in Noida

    ReplyDelete
  51. Thanks for sharing this information. I really like your post.

    ReplyDelete
  52. Thanks for sharing this post.



    Want to make your own website!!!
    Contact ACIL the best web design company in Delhi.
    WEB DESIGN COMPANY IN DELHI



    Interested in Graphic Designing Course!!!
    Contact ACIL for the best Graphic designing Institute in Gurgaon.
    GRAPHIC DESIGNING INSTITUTE IN GURGAON




    Interested in Python training!!!
    Contact ACIL for the best Python Training Institute in Gurgaon.
    PYTHON TRAINING INSTITUTE IN GURGAON



    ReplyDelete
  53. My Assignment Services is no. 1 when it comes up to providing Assignment Help Australia. We have a team of expert writers who are qualified in every level of econometrics, from basic to advanced econometrics. Some of these tutors are still working in this field, so they are well aware of the latest trends and are able to describe them well. Each assignment that we deliver, undergoes proper editing & proofreading and plagiarism check, so that there are no errors. My Assignment Services will always be there standing tall 24x7. We provide help for a wide range of assignments and styles like, dissertation, report writing, essays, case study, etc. My Assignment Services is ready for Australian students rely on our Assignment Help Kuwait services due to our amazing features like, plagiarism free content, after sales service, error free papers, etc. You don’t have to involve much, as we want you to relax and let our experts do the work for you. My Assignment Services has been serving students from past 11 years now and we have gained good name among students due to our excellent quality of work. My Assignment Services not only help with healthcare, but also other subjects like higher business management, economics, finance, computer science, biology, etc. If you also have any unfinished management assignments, then we are here to provide you the best management assignment help. Our quality is unbeatable and we provide plagiarism free content. No need to worry now, as you can avail our Chemical Engineering Assignment Help services with amazing discounts and cashbacks. There is no need to panik, as we are here to help. So, order now.

    ReplyDelete
  54. Aptron is the outstanding CCNA Training Center in Gurgaon with cutting edge foundation and lab offices. We likewise give online access of servers with the goal that competitors will execute the undertakings at their home effectively. Aptron in Gurgaon coached more than 3000+ hopefuls with CCNA Certification Training in Gurgaon at truly sensible charge. The course educational modules is modified according to the prerequisite of applicants/corporates.
    For More Info:- CCNA Training in Gurgaon

    ReplyDelete
  55. Thanks for sharing this post.
    Want to make your own website!!!
    Contact ACIL the best web design company in Delhi.
    WEB DESIGN COMPANY IN DELHI



    Interested in Graphic Designing Course!!!
    Contact ACIL for the best Graphic designing Institute in Gurgaon.
    GRAPHIC DESIGNING INSTITUTE IN GURGAON



    Interested in Python training!!!
    Contact ACIL for the best Python Training Institute in Gurgaon.
    PYTHON TRAINING INSTITUTE IN GURGAON



    Interested in Web Designing Course!!!
    Contact ACIL for the best Web Designing Institute in Gurgaon.
    WEB DESIGNING INSTITUTE IN GURGAON

    ReplyDelete
  56. Looking for the best report writing help services online? Worry no more and ask the experts of australiaassignmenthelp.com for assistance. Our experts will finish your task fast in the proper format and structure the paper well according to your university instruction.

    ReplyDelete
  57. Best blog. Seeking for an online assignment help in Sydney? Hire best assignment writer from Student Assignment Help who offers affordable and assignment help to Australian students..

    ReplyDelete
  58. Hi Author!

    Great post! I am actually getting ready to across this information, is very helpful my friend. Also great blog here with all of the valuable information you have. Keep up the good work you are doing here. Get Web Design and Development Services in New Jersey by Globtier at best optimal cost.

    web design companies in new jersey USA

    Web Designing Services in New Jersey usa

    ReplyDelete
  59. SAP HR Training in Gurgaon offered by SysAppPro with 100% hands-on handy classes. Our SAP HR Training fundamentally centers in getting arrangement for all. We made our course schedule which offers fundamental to cutting edge dimension of aptitude on SAP HR preparing at end obviously.

    For More Info:- SAP HR Course in Gurgaon

    ReplyDelete
  60. After reading this blog, I understood how students make mistakes in Assignment. However, the experts of Online Assignment Expert provide unique online assignment help . To students all across Australia. This is ensured by the multi-levels of quality checks that make the assignments error-free. Obviously, the assignments would furnish every guideline of the marking rubric.
    As a student, I have availed off their services frequently as I feel their nursing assignment helpexperts are master at whatever they do. I have observed the kind of precision that they display in their work, thereby providing me with an impeccable assignment.

    ReplyDelete
  61. This comment has been removed by the author.

    ReplyDelete
  62. tefwin.com
    Android App Development Classes in Noida
    Folkd.com
    instapaper
    Your BB code:
    [url=https://www.instapaper.com/read/1202126619]instapaper[/url]

    ReplyDelete
  63. Individuals snap have pleasant group of ORACLE-DBA experts United Nations organization square measure every single working proficient constant ORACLE-DBA venture aptitude that may offer understudies or competitors another favorable position over various training Institutes. APTRON furnishes Oracle DBA Course with Placement Gurgaon. The Oracle data and components, read the Alert log, Use the information dictionary, see and use Oracle Managed Files (OMF), Create and oversee table territories, get table house data and so forth.

    For More Info:- Oracle DBA course in Gurgaon

    ReplyDelete
  64. Congratulations to the coding team who is behind this update neurologist in hyderabad and best wishes for the future updates cardiologist in india Thanks for this post.

    ReplyDelete

Note: Only a member of this blog may post a comment.