4 ms·
The eXpress Data Path: Fast Programmable Packet Processing in the OS Kernel [pdf]
- anonymousDan 8y agoPretty cool but no mention of the implications for Spectre attacks...
- zippie 8y agoThough the parent mentions AF_XDP can be used in user space, it will require BPF maps to route the queues properly. If you’re interested in XDP and the like, also check out DPDK (BSD licensed, https://www.dpdk.org https://www.dpdk.org).
- debatem1 8y agoAlso netmap, which I find easier to use: http://info.iet.unipi.it/~luigi/netmap/ http://info.iet.unipi.it/~luigi/netmap/
- ArtWomb 8y agoCloudflare is using XDP to mitigate DDoS https://blog.cloudflare.com/how-to-drop-10-million-packets/ https://blog.cloudflare.com/how-to-drop-10-million-packets/
- lostmsu 8y ago> With XDP we can run eBPF code in the context of a network driver. This looks interesting, but it also looks like it was designed to run this eBPF code on the network adapter itself, when it allows it. Otherwise, why the bytecode?
- lmb 8y agoThe byte code is used as a target for verification, and is designed to be easily JITable on x86 and arm. There are network cards which offer eBPF offload, but they only implement a subset of features available in the kernel. I imagine that keeping up is hard, since the technology is moving quickly. Netronome seems to have the most advanced eBPF offload available.