{"updated":"2025-01-19T21:39:11.840736+00:00","metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00199588","sets":["581:9633:9642"]},"path":["9642"],"owner":"44499","recid":"199588","title":["Large-scale Certificate Management on Multi-tenant Web Servers"],"pubdate":{"attribute_name":"公開日","attribute_value":"2019-09-15"},"_buckets":{"deposit":"0c4449e1-5577-45a5-9a50-f964f5a39471"},"_deposit":{"id":"199588","pid":{"type":"depid","value":"199588","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"Large-scale Certificate Management on Multi-tenant Web Servers","author_link":["483256","483253","483254","483251","483255","483252"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"Large-scale Certificate Management on Multi-tenant Web Servers"},{"subitem_title":"Large-scale Certificate Management on Multi-tenant Web Servers","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"[特集：“Applications and the Internet” in Conjunction with Main Topics of COMPSAC2018] web Server, TLS, operation technology, multi-tenant, large-scale, nginx, mruby","subitem_subject_scheme":"Other"}]},"item_type_id":"2","publish_date":"2019-09-15","item_2_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"SAKURA Research Center, SAKURA Internet Inc."},{"subitem_text_value":"Pepabo Research and Development Institute, GMO Pepabo, Inc.／Kenji Rikitake Professional Engineer's Office"},{"subitem_text_value":"Pepabo Research and Development Institute, GMO Pepabo, Inc."}]},"item_2_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"SAKURA Research Center, SAKURA Internet Inc.","subitem_text_language":"en"},{"subitem_text_value":"Pepabo Research and Development Institute, GMO Pepabo, Inc. / Kenji Rikitake Professional Engineer's Office","subitem_text_language":"en"},{"subitem_text_value":"Pepabo Research and Development Institute, GMO Pepabo, Inc.","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"eng"}]},"publish_status":"0","weko_shared_id":44499,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/199588/files/IPSJ-JNL6009029.pdf","label":"IPSJ-JNL6009029.pdf"},"date":[{"dateType":"Available","dateValue":"2021-09-15"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-JNL6009029.pdf","filesize":[{"value":"1.9 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"0","billingrole":"5"},{"tax":["include_tax"],"price":"0","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"8"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"bc7741e2-79da-476b-8dfc-5d69bb2d6b9b","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2019 by the Information Processing Society of Japan"}]},"item_2_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Ryosuke, Matsumoto"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Kenji, Rikitake"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Kentaro, Kuribayashi"}],"nameIdentifiers":[{}]}]},"item_2_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Ryosuke, Matsumoto","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Kenji, Rikitake","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Kentaro, Kuribayashi","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_2_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AN00116647","subitem_source_identifier_type":"NCID"}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_6501","resourcetype":"journal article"}]},"item_2_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"1882-7764","subitem_source_identifier_type":"ISSN"}]},"item_2_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"For large-scale certificate management of multi-tenant web servers, preloading numerous certificates for managing numerous hosts under the single server process results in increasing the required memory usage because of the respective page table entry manipulation, which might be a poor resource efficiency and a reduced capacity. To resolve this issue, we propose a method for dynamic loading of certificates bound to the hostnames found during the SSL/TLS handshake sequences without preloading, provided that the Server Name Indication (SNI) extension is available. We implemented the function of choosing the respective certificates with the ngx_mruby module, which extends web server functions using mruby with a small memory footprint while maintaining the execution speed. The proposed method was evaluated by a web hosting service employing the authors.\n------------------------------\nThis is a preprint of an article intended for publication Journal of\nInformation Processing(JIP). This preprint should not be cited. This\narticle should be cited as: Journal of Information Processing Vol.27(2019) (online)\nDOI　http://dx.doi.org/10.2197/ipsjjip.27.650\n------------------------------","subitem_description_type":"Other"}]},"item_2_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"For large-scale certificate management of multi-tenant web servers, preloading numerous certificates for managing numerous hosts under the single server process results in increasing the required memory usage because of the respective page table entry manipulation, which might be a poor resource efficiency and a reduced capacity. To resolve this issue, we propose a method for dynamic loading of certificates bound to the hostnames found during the SSL/TLS handshake sequences without preloading, provided that the Server Name Indication (SNI) extension is available. We implemented the function of choosing the respective certificates with the ngx_mruby module, which extends web server functions using mruby with a small memory footprint while maintaining the execution speed. The proposed method was evaluated by a web hosting service employing the authors.\n------------------------------\nThis is a preprint of an article intended for publication Journal of\nInformation Processing(JIP). This preprint should not be cited. This\narticle should be cited as: Journal of Information Processing Vol.27(2019) (online)\nDOI　http://dx.doi.org/10.2197/ipsjjip.27.650\n------------------------------","subitem_description_type":"Other"}]},"item_2_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographic_titles":[{"bibliographic_title":"情報処理学会論文誌"}],"bibliographicIssueDates":{"bibliographicIssueDate":"2019-09-15","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"9","bibliographicVolumeNumber":"60"}]},"relation_version_is_last":true,"weko_creator_id":"44499"},"created":"2025-01-19T01:03:29.493381+00:00","id":199588,"links":{}}