Deep Packet Inspection (DPI) and other specialized packet processing workloads are often run in user space due to their complexity and/or specialization. With the increase of Ethernet speeds from 40, 100 to 200 Gbits/s, the need for high-speed raw Ethernet frame delivery to Linux user-space is ever increasing. In this talk, we present AFXDP (formerly known as AFPACKET V4) designed to scale to these high networking speeds through the use of true zero-copy, lock-less data structures, elimination of syscalls and other techniques, while still abiding to the isolation and security rules of Linux. AF_XDP is currently an RFC on the Linux netdev mailing list with the goal to get it accepted upstream.
In our evaluation, AFXDP provides a performance increase of up to 40x for some microbenchmarks and 20x for tcpdump compared to previous AFPACKET (raw socket) versions in Linux. To illustrate the approach, we have implemented support for Intel I40E NICs and veth, but it should hopefully be easy to port to other NICs and virtual devices as well. AFXDP is designed as an extension to the existing XDP support in Linux so that XDP enabled devices will be able to use this. We also show how SW networking libraries and SDKs such as DPDK can benefit from AFXDP to achieve increased robustness, ease-of-use and HW independence.
Magnus Karlsson is a Principal Engineer at Intel. Magnus joined Intel in late 2014 through the acquisition of LSI's/Avago's networking processor business and has worked for the past 25 years with low-level SW such as operating systems, hypervisors, networking, and boot loaders as... Read More →
Björn is a Linux kernel networking hacker at Intel, with a a soft spot for memory models, all things networking, and RISC-V. He's a wannabe librarian, coffee addict, and kernel maintainer.
Friday March 9, 2018 2:30pm - 2:55pm PST
Leela Palace
