💾 Archived View for gemini.bortzmeyer.org › fosdem › event-10954.gmi captured on 2023-03-21 at 01:04:48. Gemini links have been rewritten to link to archived content
⬅️ Previous capture (2021-12-17)
-=-=-=-=-=-=-
Fan Zhang
Type devroom
How to accelerate IPsec elephant flows
Starts on day 2 (2021-02-07) at 17:20 (Brussels time, UTC+1) in room Sdn (duration 00:20)
Matrix room #sdn:fosdem.org
Elephant flows appear irregularly, can consume almost half of the available bandwidth and are consequently associated with a host of issues. Securing elephant flows with IPsec is a well-known challenge to SDN and SD-WAN solutions on commodity hardware. The key problems for those developing solutions are:
- How to seamlessly enable dedicated HW to accelerate IPsec processing when available?
- How to distribute workloads to more CPU cores and maintain packets ordering to scale?
- How to scale up/scale down the computer resource usage when the elephant flow appears and disappears?
In this talk we will discuss our recent work done on open-source project FD.io/VPP to address the above problems. We will describe how we utilized and enriched the VPP architecture to accelerate on-demand IPsec elephant flow processing in a unified and seamless way.