In this blog We will compare the result with the results of my last blog in which we looked at how much a vanilla Linux kernel could do in terms of forwarding (routing) packets. We observed that on Linux, to achieve 14Mpps we needed roughly 16 and 26 cores for a unidirectional and bidirectional test. In this article, we’ll look at what we need to accomplish this with FD.io To continue reading about kernel bypass networking with FD.io VPP please click below.
As most of you may already know, QUIC is a new transport protocol that began as a Google experiment for HTTP/2, which is now being standardized at the IETF. It will also be the default transport protocol for HTTP/3. As a result, it is likely to be very widely deployed in the next few years. Given the growing popularity of QUIC and its expected widespread deployment, it was essential to provide an implementation of QUIC in the Vector Packet Processor (VPP), both to measure the performance that we could reach with a full userspace QUIC stack, and as an enabler for more innovation around the QUIC protocol. To build fast QUIC sockets with FD.io VPP please click below.
The rise in worker mobility and increasingly complex multi-cloud architectures is escalating organizations’ reliance on encryption. This puts computational strain on VPN products, especially as they evolve, for example, from 1 to 10 to 40 Gbps or more. Traditional router/VPN appliances buckle under the load, forcing the quest for higher performance solutions that won’t break the bank. High-performance IPSec is an application where VPP clearly shines – especially when compared to traditional solutions underpinned by kernel-based, single packet at a time processing approaches. In fact, one vendor who has productized VPP reports observing the following performance numbers (based on AES-GCM-128 encrypted IMIX traffic being processed by a stock Intel® Xeon® Gold 6130 CPU @ 2.10GHz CPU): 3.07 MPPS (8.86 Gbps) (QAT assist) 2.13 MPPS (6.14 Gbps) (no QAT assist) That was on a single core. For more on FD.io Improves Multicore IPSec click below.
The Universal Deep Packet Inspection (UDPI) project is a reference framework to build a high performance solution for Deep Packet Inspection, integrated with the general purpose FD.io VPP stack. It leverages industry regex matching library to provide a rich set of features, which can be used in IPS/IDS, Web Firewall and similar applications. It also can be integrated into 5G, Edge, and Cloud Networking for application based services. The initial code contributions are from Intel and Travelping. So far, there are 17 organizations joined and 20 committers, including Intel, ZTE, China Telecom, HuachenTel, Inspur, Yxlink, Sunyainfo, Tencent, China Unicom, Huawei, QingCloud, Netgate, Alibaba, 360, Trend Micro, Nokia, HAOHAN Data.
SAN JOSE – FD.io (“Fido”) – an open source project within The Linux Foundation’s LF Networking (LFN) – announced the availability of FD.io Vector Packet Processor (VPP) software release 20.01. With release 20.01 FD.io VPP includes multiple queue/core support with all it’s drivers including Linux TAPv2. End to end Generic Segment Offload (GSO) is also now supported. The VPP host stack supports GSO for TCP and at the driver level, VPP supports GSO across vmxnet3 on esxi, linux tap devices, and vhost-user devices for virtualization. This significantly improves VPP interaction and performance with Linux, and container solutions like Kubernetes. The same can be also said of the VPP interface with Virtual Machines whether it be with vhost (QEMU) or vmxnet3 (VMware). For an example of how using multiple queues/cores improve packet throughput let’s examine these impressive performance numbers from the Continuous System Integration and Test (CSIT) tests. VPP performance is continuously being …
SAN FRANCISCO – FD.io (“Fido”) – an open source project within The Linux Foundation’s LF Networking (LFN), specifically focused on becoming the world’s packet processing data plane for secure network infrastructure applications – today announced the availability of VPP software release 19.08. The release provides significant additions and enhancements to the Vector Packet Processing’s (VPP) network stack, host stack, and management infrastructure – furthering its breakthrough packet processing performance and strengthening ease of deployment and manageability.
Hybrid Information-Centric Networking (hICN) is a new way of thinking about networking that we are bringing to FD.io. With hICN, communications are centered around the “what” instead of the “where,” and the core network principles are pivoted toward this core idea. Rethinking networking around data instead of locations provides several advantages. Location-independent communications natively provides mobility, multi-homing, multi-path and, in general, many-to-many interactions. hICN does not secure the end-points but the data itself and provides a higher level of anonymization, so consumers can be assured that their information is safe. For many applications, traffic can scale with the amount of information exchanged, and not with the number of connected endpoints as when using unicast transport. hICN also brings information-centric principles into IPv6. For example, hICN- enabled routers do not need to be deployed everywhere in the network, but only where it matters. IP management and …
FD.io (“Fido”) – An open source project within The Linux Foundation – relentlessly focused on data speed and efficiency supporting the creation of high-performance, flexible, and scalable cloud native infrastructures, today announced the availability of its 18.01 software release. Focused on enhancements to improve Kubernetes Networking, Istio, and cloud native network functions virtualization (NFV), 18.01 is FD.io’s sixth software release. FD.io’s pure user space networking technology allows cloud native networking in Kubernetes to run entirely as a high-performance microservice in a Kubernetes pod, improving performance, latency, efficiency, maintainability, and speed of innovation. The 18.01 release includes improvements in Network Address Translation (NAT) and Access Control Lists (ACL) performance as well as flexibility to improve support for Kubernetes Service and Network Policy APIs. These improvements were incorporated into the upcoming 2.0 release of the open source Contiv …
The Fast Data Project (FD.io) released its sixth update since its inception within the Linux Foundation two years ago. While the update list is extensive, most are focused on Kubernetes networking, cloud native network functions virtualization (NFV), and Istio.
FD.io, one of Linux Foundation’s open source projects, has introduced its 18.01 software release with a focus on improving Kubernetes Networking, Istio and cloud native NFV. This is FD.io’s sixth software release to date.
Verizon and Cisco are doing something new. The two companies have announced the successful test of Cisco’s information-centric networking (ICN) software, a solution based on technology the vendor acquired from Xerox research company PARC just over a year ago, and for which Cisco has created an open source project with the Linux Foundation.
FD.io (“Fido”), relentlessly focused on data IO speed and efficiency supporting the creation of high-performance, flexible, and scalable software-defined infrastructures, today announced Huawei as the newest Platinum member. Huawei’s upgrade from Gold to Platinum demonstrates both the project’s and Huawei’s commitment to pursuing faster, more open and innovative software-based packet processing. FD.io offers the software-defined infrastructure developer community a landing site with multiple projects fostering innovations in software-based packet processing toward the creation of high-throughput, low-latency, and resource-efficient IO services suitable to many architectures (x86, ARM, and PowerPC) and deployment environments (bare metal, VM, container). Created to address gaps that exist in the open networking stack to deliver dynamic data plane services for dynamic computing environments such as cloud, containers, and network functions virtualization (NFV), the design of FD.io is …