클라우드 환경의 소규모 인스턴스에서 보안 솔루션이 웹 서비스 성능에 미치는 영향

초록

This study empirically analyzes the impact of applying security solutions on web service availability in low-specification instance (AWS t2.micro) environments, which are widely utilized by startups and small organizations alongside the proliferation of cloud computing Small burstable instances, selected for cost-efficiency, possess a unique resource constraint mechanism known as CPU Credits. In this environment, load tests were conducted by incrementally applying standard security solutions, including firewalls (UFW), encryption (SSL/TLS), intrusion prevention (Fail2ban), web application firewalls (ModSecurity), and network intrusion detection (Suricata). The results confirmed a clear trade-off between security strength and service availability. Experimental results indicated that kernel-level or log-based lightweight security solutions had minimal impact on performance. However, the application of high-load solutions performing Deep Packet Inspection (DPI), such as Suricata, caused CPU resources to reach saturation rapidly. specifically, in the Suricata application scenario, CPU credits were depleted quickly, causing the average response time to surge to over 2.3 seconds and resulting in a failure rate of approximately 20.2% for total requests. This leads to a state of availability degradation similar to system paralysis caused by excessive overhead from internal security solutions, even in the absence of external attacks. In conclusion, this study suggests that the unconditional introduction of high-level security solutions should be avoided for protecting resource-constrained small cloud infrastructures. Instead, it proposes strategies optimized for specific situations and environments, emphasizing that infrastructure scale-up must precede to guarantee availability.

키워드