A Terabit Secure Network Data-Plane
FD.io VPP breaks the 1 Tbit/s IPsec and 1 Billion pkts/s barriers on new 3rd Gen Intel Xeon Scalable processors
FD.io VPP breaks the 1 Tbit/s IPsec and 1 Billion pkts/s barriers on new 3rd Gen Intel Xeon Scalable processors
IEEE Cluster 2020 Kobe – The paper titled “CuVPP: Filter-based Longest Prefix Matching in Software Data Planes” wins “Best Papers” award at IEEE Cluster 2020 on September 15th.
Programmability in network switches (or data planes) has become increasingly important with increasing network virtualization in the Internet infrastructure and large-scale data centers. A critical challenge in data plane programmability is to maintain high-speed packet processing performance with ever increasing link speed to hundreds of Gbps or Tbps. Another challenge is the rapid growing routing table size, e.g., more than 500,000 entries.
We implement CuVPP as part of the Real Software Switch VPP and provide a comprehensive evaluation using popular alternative approaches with realistic data sets for network prefixes and traffic.
The video presentation can be found here: CuVPP Video. The paper can be found here: CuVPP Paper.
SAN JOSE – FD.io (“Fido”) – an open source project within The Linux Foundation’s LF Networking (LFN) – announced the availability of FD.io Vector Packet Processor (VPP) software release 20.05.
The FD.io VPP (Vector Packet Processor) release 20.05 is now available. FD.io VPP continues to be relentlessly focused on performance. In addition, FD.io VPP continues to add features. All this without sacrificing packet throughput. In this article we highlight some remarkable performance numbers, point to some of the features added in 20.05 and then point to some articles that have been published in the past 5 months.
Revealed: the past, present, and future of the most popular data plane development kit in the world.
When we started integrating VPP in Kubernetes with Calico as a management plane, the goal was to bring the performance of VPP with the flexibility of userspace networking to containers. With its unrivaled IPsec performance, this was clearly an area where VPP would be able to help. Without further ado, here is the encrypted throughput we achieved between two pods on a 40G network
To learn more about VPP/Calico click below.
In this blog We will compare the result with the results of my last blog in which we looked at how much a vanilla Linux kernel could do in terms of forwarding (routing) packets. We observed that on Linux, to achieve 14Mpps we needed roughly 16 and 26 cores for a unidirectional and bidirectional test. In this article, we’ll look at what we need to accomplish this with FD.io
To continue reading about kernel bypass networking with FD.io VPP please click below.