[zeromq-dev] More security thoughts

[Martin Sustrik]

On 11/17/2010 08:41 PM, Brian Granger wrote:

> You want to make sure that the IO thread is free enough to keep the
> underlying network pipe full.  If the IO thread starts to do CPU bound
> work to the point where it can't maintain max network throughput, that
> will kill performance.  But, the idea of having an encryption thread is
> a good one - or as Martin suggested using a special device for this purpose.

Right. And both actually boil down to the same model:

Application-thread <-> Encryption(device)-thread <-> I/O-thread

You can even think of running several encryption threads in parallel 
(parallelised pipeline a.k.a. PUSH/PULL).

Martin