Galleon: Reshaping the Square Peg of NFV

01/16/2021
by   Jianfeng Wang, et al.
0

Software is often used for Network Functions (NFs) – such as firewalls, NAT, deep packet inspection, and encryption – that are applied to traffic in the network. The community has hoped that NFV would enable rapid development of new NFs and leverage commodity computing infrastructure. However, the challenge for researchers and operators has been to align the square peg of high-speed packet processing with the round hole of cloud computing infrastructures and abstractions, all while delivering performance, scalability, and isolation. Past work has led to the belief that NFV is different enough that it requires novel, custom approaches that deviate from today's norms. To the contrary, we show that we can achieve performance, scalability, and isolation in NFV judiciously using mechanisms and abstractions of FaaS, the Linux kernel, NIC hardware, and OpenFlow switches. As such, with our system Galleon, NFV can be practically-deployable today in conventional cloud environments while delivering up to double the performance per core compared to the state of the art.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
05/11/2022

Trusted Container Extensions for Container-based Confidential Computing

Cloud computing has emerged as a corner stone of today's computing lands...
research
08/19/2017

Abstractions for Verifying Isolation Properties in Stateful Networks

Modern networks achieve robustness and scalability by maintaining states...
research
01/29/2021

Isolation mechanisms for high-speed packet-processing pipelines

Data-plane programmability is now mainstream, both in the form of progra...
research
11/02/2020

10 Years Later: Cloud Computing is Closing the Performance Gap

Can cloud computing infrastructures provide HPC-competitive performance ...
research
01/04/2019

Efficient, Dynamic Multi-tenant Edge Computation in EdgeOS

In the future, computing will be immersed in the world around us – from ...
research
09/16/2019

RVH: Range-Vector Hash for Fast Online Packet Classification

Packet classification according to multi-field ruleset is a key componen...
research
06/21/2020

Performance Evaluation of Fuzzy Integrated Firewall Model for Hybrid Cloud based on Packet Utilization

Cloud computing is one of the highly flexible, confidential and easily a...

Please sign up or login with your details

Forgot password? Click here to reset