Enhanced thread handling in security handshaking
Disclosed herein are methods, systems, and software for handling threaded processes in security handshaking between end users and content delivery nodes are presented. In one example, a method of operating a content delivery node includes identifying a secure layer connection request within an application thread, and initiating a new thread for a security handshake process based on the secure layer connection request. The method further includes, in response to completing the security handshake process, returning to the application thread.
1. A method of operating a cache node in a content delivery network comprising:
in a processor, executing an application thread in association with a request for content cached in the content delivery network;
while the application thread executes, the processor monitoring for a secure layer connection request to occur within the application thread;
in response to the secure layer connection request occurring, the processor utilizing a handshake thread from a pool of idle handshake threads to execute a security handshake process in reply to the secure layer connection request; and
upon the handshake thread completing the security handshake process, the processor returning to the application thread and returning the handshake thread to the pool of idle handshake threads.
2. The method of claim 1 wherein the secure layer connection request comprises a secure sockets layer request.
3. The method of claim 1 wherein the secure layer connection request comprises a transport layer security request.
4. The method of claim 1 wherein the application thread comprises a data thread.
5. The method of claim 4 wherein the data thread comprises a thread that handles the request.
6. One or more non-transitory computer readable storage media having program instructions stored thereon for operating a cache node in a content delivery network that, when executed by a processing system, direct the processing system to at least:
execute an application thread in association with a request for content cached in the content delivery network;
while the application thread executes, monitor for a secure layer connection request to occur within the application thread;
in response to the secure layer connection request occurring, utilize a handshake thread from a pool of idle handshake threads to execute a security handshake process in reply to the secure layer connection request; and
upon the handshake thread completing the security handshake process, return to the application thread and return the handshake thread to the pool of idle handshake threads.
7. A computing apparatus comprising:
one or more non-transitory computer readable storage media;
a processing system operatively coupled with the one or more non-transitory computer readable storage media; and
program instructions stored on the one or more non-transitory computer readable storage media for operating a cache node in a content delivery network that, when executed by the processing system, direct the processing system to at least:
execute an application thread in association with a request for content cached in the content delivery network;
while the application thread executes, monitor for a secure layer connection request to occur within the application thread;
in response to the secure layer connection request occurring, utilize a handshake thread from a pool of idle handshake threads to execute a security handshake process in reply to the secure layer connection request; and
upon the handshake thread completing the security handshake process, return to the application thread and return the handshake thread to the pool of idle handshake threads.
8. The computing apparatus of claim 7 wherein the secure layer connection request comprises a secure sockets layer request.
9. The computing apparatus of claim 7 wherein the secure layer connection request comprises a transport layer security request.
10. The computing apparatus of claim 7 wherein the application thread comprises a data thread.
11. The computing apparatus of claim 10 wherein the data thread comprises a thread that handles the request.