From Splunk Wiki

< Back to Best Practices

SSL Acceleration with Splunk

One way you could improve the performance of a Splunk deployment is through SSL acceleration. Off loading the SSL duties to an external hardware device would allow for Splunk to utilize the maximum amount of resources on the server. There are multiple products on the market that could work with Splunk. Since the configuration varies from device to device, you should contact support (http://www.splunk.com/page/submit_issue) if you plan to implement such a device. Some benefits you may see from offloading the SSL processing:

• Improved performance from Splunk - Connection handling and improved transfer rates (faster searches)
• Keys can be stored on the hardware which increases security