Presentation is loading. Please wait.

Presentation is loading. Please wait.

Virtio Inline Accelerator

Published byChristian Harrell Modified over 5 years ago

Similar presentations

Presentation on theme: "Virtio Inline Accelerator"— Presentation transcript:

1 Virtio Inline Accelerator
VNF Application g-API SAL in user space guest Commands/ re-injected packets Status/ Exception Packets Accelerated Traffic Non-accelerated Incoming Virtio-net User Frontend Driver Virtio-net User Frontend Driver Virtio Inline User Frontend Driver sio in Kernel virtio-inline vRings vRings Vhost-net Backend Virtio Inline Backend vHost-user Vhost-net Backend SRL Host user space SAL in host user space g-net-driver g-accel-driver g-net-driver SW Accelerator This view is attempting to show the DPACC layer and configuration can be designed by the developer to give his application the best accelerated performance. In this picture having a software acceleration layer in the host would provide the best performance and flexibility for a VNF application. device hio HW Accelerator Physical ports Physical ports Fig 5. Virtio based Inline Acceleration 13/11/2018

2 Multiple Virtio Inline Accelerators
Firewall App IPS App NAT App Router App IPsec App g-API SAL in user space  Virtio net frontend  Virtio Inline FW frontend  Virtio net frontend Virtio Inline IPS frontend  Virtio net frontend Virtio Inline NAT frontend  Virtio net frontend Virtio Inline Router frontend  Virtio net frontend Virtio Inline Ipsec frontend  Virtio net frontend guest Commands/ re-injected packets Status/ Exception Packets Accelerated Traffic Non-accelerated Incoming sio in Kernel virtio-inline vRings vRings vRings vRings vRings Virtio Inline Backend vHost-user SRL Host user space SAL in host user space g-net driver g-FW driver g-IPS driver g-NAT driver g-router driver g-IPsec driver g-net driver SW Accelerator hio device FW Accelerator Intrusion Prevention (IPS) Accelerator NAT Accelerator Router Accelerator Ipsec VPN Accelerator Physical ports Physical ports Fig 6. Examples for multiple virtio based Inline Acceleration 13/11/2018

3 NFV Infrastructure Accelerator with all phy ports in smartNIC
Commands/ re-injected packets Status/ Exception Packets Accelerated Traffic Non-accelerated Incoming VNF Application VNF Application g-API SAL in user space guest Virtio-net User Frontend Driver Virtio-net Backend Acceleration Management Layer Host user space SAL in host user space g-srl-driver hio This view is attempting to show the DPACC layer and configuration can be designed by the developer to give his application the best accelerated performance. In this picture having a software acceleration layer in the host would provide the best performance and flexibility for a VNF application. device SRL Accelerator Physical ports Figure Y NFVI Packet Processing Accelerator 13/11/2018

4 NFV Infrastructure Accelerator with some non-smartNIC phy ports
VNF Application VNF Application g-API SAL in user space guest Commands/ re-injected packets Status/ Exception Packets Accelerated Traffic Non-accelerated Incoming Virtio-net User Frontend Driver Virtio-net Backend SRL???? Acceleration Management Layer Host user space SAL in host user space g-net-driver g-srl-driver hio This view is attempting to show the DPACC layer and configuration can be designed by the developer to give his application the best accelerated performance. In this picture having a software acceleration layer in the host would provide the best performance and flexibility for a VNF application. device SRL Accelerator Physical ports Physical ports Figure Y NFVI Packet Processing Accelerator 13/11/2018

5 Previous figures – discard after finalizing
13/11/2018

6 Virtio Inline Accelerator
VNF Application g-API SAL in user space guest Commands/ re-injected packets Status/ Exception Packets Accelerated Traffic Non-accelerated Incoming Virtio-net User Frontend Driver Virtio-net User Frontend Driver Virtio Inline User Frontend Driver sio in Kernel virtio-inline vRings vRings Vhost-net Backend Virtio Inline Backend vHost-user Vhost-net Backend SRL-0 SRL-1 Host user space SAL in host user space g-net-driver g-accel-driver g-net-driver SW Accelerator This view is attempting to show the DPACC layer and configuration can be designed by the developer to give his application the best accelerated performance. In this picture having a software acceleration layer in the host would provide the best performance and flexibility for a VNF application. device hio HW Accelerator Physical ports Physical ports Fig 5. Virtio based Inline Acceleration 13/11/2018

7 Multiple Virtio Inline Accelerators
Firewall App IPS App NAT App Router App IPsec App g-API SAL in user space  Virtio Inline FW Frontend Virtio Inline IPS Frontend Virtio Inline NAT Frontend Virtio Inline Router Frontend Virtio Inline IPsec Frontend guest sio in Kernel virtio-inline Commands/ re-injected packets Status/ Exception Packets Accelerated Traffic Other vRings vRings vRings vRings vRings Virtio Inline Backend vHost-user Host user space SAL in host user space FW g-driver IPS g-driver NAT g-driver Router g-driver IPsec g-driver hio hio hio hio hio Firewall (FW) accelerator Intrusion Prevention (IPS) accelerator NAT accelerator Router accelerator Ipsec VPN accelerator device SRL in host user space Physical ports Fig 6. Examples for multiple virtio based Inline Acceleration 13/11/2018

8 Virtio Inline Accelerator
VNF Application g-API SAL in user space guest Commands/ re-injected packets Status/ Exception Packets Accelerated Traffic Other Virtio-net User Frontend Driver Virtio-net User Frontend Driver Virtio Inline User Frontend Driver sio in Kernel virtio-inline vRings vRings Vhost-net Backend Virtio Inline Backend vHost-user Vhost-net Backend SAL in host user space Host user space g-driver SW Accelerator hio This view is attempting to show the DPACC layer and configuration can be designed by the developer to give his application the best accelerated performance. In this picture having a software acceleration layer in the host would provide the best performance and flexibility for a VNF application. device HW Accelerator SRL Physical ports Fig 5. Virtio based Inline Acceleration 13/11/2018

9 Virtio Inline Accelerator
VNF Application g-API SAL in user space Commands/ re-injected packets Status/ Exception Packets Accelerated Traffic guest Virtio-net User Frontend Driver Virtio-net User Frontend Driver Virtio Inline User Frontend Driver sio in Kernel virtio-inline Vhost-net Backend Virtio Inline Backend vHost-user Vhost-net Backend SAL in host user space Host user space g-driver SW Accelerator hio device HW Accelerator Patch ports to other SW/HW Accelerators Patch ports to other SW/HW Accelerators Physical ports Fig 5. Virtio based Inline Acceleration 13/11/2018

10 Multiple Virtio Inline Accelerators
Firewall App IPS App NAT App Router App IPsec App g-API SAL in user space guest  Virtio Inline FW Frontend Virtio Inline IPS Frontend Virtio Inline NAT Frontend Virtio Inline Router Frontend Virtio Inline IPsec Frontend sio in Kernel virtio-inline Commands/ re-injected packets Status/ Exception Packets Accelerated Traffic vRings vRings vRings vRings vRings Virtio Inline Backend vHost-user Host user space SAL in host user space FW g-driver IPS g-driver NAT g-driver Router g-driver IPsec g-driver hio device Firewall (FW) accelerator Intrusion Prevention (IPS) accelerator NAT accelerator Router accelerator Ipsec VPN accelerator Physical ports Fig 6. Examples for multiple virtio based Inline Acceleration 13/11/2018

Download ppt "Virtio Inline Accelerator"

Similar presentations

Integration of PAP site 17 th July 10. Requirements of PAP SITE  Bandwidth drop  Router  RJ45 cables  Switch  Gateway  Nodes  Ups  9urack.

Integration of PAP site 17 th July 10. Requirements of PAP SITE  Bandwidth drop  Router  RJ45 cables  Switch  Gateway  Nodes  Ups  9urack.
Computer Security: Principles and Practice Chapter 9 – Firewalls and Intrusion Prevention Systems.

Computer Security: Principles and Practice Chapter 9 – Firewalls and Intrusion Prevention Systems.
Firewalls 2014.04.07 Uyanga Tserengombo

Firewalls Uyanga Tserengombo
Presented by Justin Bode CS 450 – Computer Security February 17, 2010.

Presented by Justin Bode CS 450 – Computer Security February 17, 2010.
Keith Wiles Keith.Wiles@Intel.com DPACC vNF Overview and Proposed methods Keith Wiles Keith.Wiles@Intel.com 2015.04.03 – v0.5.

Keith Wiles DPACC vNF Overview and Proposed methods Keith Wiles – v0.5.
Accelerating the Path to the Guest

Accelerating the Path to the Guest
Network Implementation for Xen and KVM Class project for E6998-01: Network System Design and Implantation 12 Apr 2010 Kangkook Jee (kj2181)

Network Implementation for Xen and KVM Class project for E : Network System Design and Implantation 12 Apr 2010 Kangkook Jee (kj2181)
Virtio-crypto Web Server App OpenSSL “lib” VNFC in a VM

Virtio-crypto Web Server App OpenSSL “lib” VNFC in a VM
DPACC vNF Overview and Proposed methods Keith Wiles 1 2015.04.03 – v0.5.

DPACC vNF Overview and Proposed methods Keith Wiles – v0.5.
dpacc framework discussion data plane

dpacc framework discussion data plane
Department Of Computer Engineering

Department Of Computer Engineering
© 2006 Cisco Systems, Inc. All rights reserved. Implementing Secure Converged Wide Area Networks (ISCW) Module 6: Cisco IOS Threat Defense Features.

© 2006 Cisco Systems, Inc. All rights reserved. Implementing Secure Converged Wide Area Networks (ISCW) Module 6: Cisco IOS Threat Defense Features.
1 © 2001, Cisco Systems, Inc. All rights reserved. Session Number Presentation_ID Cisco Easy VPN Solutions Applications and Implementation with Cisco IOS.

1 © 2001, Cisco Systems, Inc. All rights reserved. Session Number Presentation_ID Cisco Easy VPN Solutions Applications and Implementation with Cisco IOS.
And how they are used. Hubs send data to all of the devices that are plugged into them. They have no ability to send packets to the correct ports. Cost~$35.

And how they are used. Hubs send data to all of the devices that are plugged into them. They have no ability to send packets to the correct ports. Cost~$35.
Networking Components Mike Yardley LTEC 4550 Assignment 3

Networking Components Mike Yardley LTEC 4550 Assignment 3
AIS, 20141 Passwords Should not be shared Should be changed by user Should be changed frequently and upon compromise (suspected unauthorized disclosure)

AIS, Passwords Should not be shared Should be changed by user Should be changed frequently and upon compromise (suspected unauthorized disclosure)
Page 1 NAT & VPN Lecture 8 Hassan Shuja 05/02/2006.

Page 1 NAT & VPN Lecture 8 Hassan Shuja 05/02/2006.
Module 4: Configuring ISA Server as a Firewall. Overview Using ISA Server as a Firewall Examining Perimeter Networks and Templates Configuring System.

Module 4: Configuring ISA Server as a Firewall. Overview Using ISA Server as a Firewall Examining Perimeter Networks and Templates Configuring System.
Control Processor Switch Fabric ATM Switch Core Port Processors FPX SPC LC IPPOPP FPX SPC LC IPPOPP FPX SPC LC IPPOPP FPX SPC LC IPPOPP FPX SPC LC IPPOPP.

Control Processor Switch Fabric ATM Switch Core Port Processors FPX SPC LC IPPOPP FPX SPC LC IPPOPP FPX SPC LC IPPOPP FPX SPC LC IPPOPP FPX SPC LC IPPOPP.
SeGW function offload 1/4 SeGW VNF SmGW VNF Virtual Switch Other VNF VNFs NFVI Network Processor Offload “programming” 1)VNF need to talk to Packet Processor.

SeGW function offload 1/4 SeGW VNF SmGW VNF Virtual Switch Other VNF VNFs NFVI Network Processor Offload “programming” 1)VNF need to talk to Packet Processor.

Similar presentations

Ads by Google