The rise in worker mobility and increasingly complex multi-cloud architectures is escalating organizations’ reliance on encryption. This puts computational strain on VPN products, especially as they evolve, for example, from 1 to 10 to 40 Gbps or more. Traditional router/VPN appliances buckle under the load, forcing the quest for higher performance solutions that won’t break the bank. High-performance IPSec is an application where VPP clearly shines – especially when compared to traditional solutions underpinned by kernel-based, single packet at a time processing approaches. In fact, one vendor who has productized VPP reports observing the following performance numbers (based on AES-GCM-128 encrypted IMIX traffic being processed by a stock Intel® Xeon® Gold 6130 CPU @ 2.10GHz CPU): 3.07 MPPS (8.86 Gbps) (QAT assist) 2.13 MPPS (6.14 Gbps) (no QAT assist) That was on a single core. For more on FD.io Improves Multicore IPSec click below.
The Universal Deep Packet Inspection (UDPI) project is a reference framework to build a high performance solution for Deep Packet Inspection, integrated with the general purpose FD.io VPP stack. It leverages industry regex matching library to provide a rich set of features, which can be used in IPS/IDS, Web Firewall and similar applications. It also can be integrated into 5G, Edge, and Cloud Networking for application based services. The initial code contributions are from Intel and Travelping. So far, there are 17 organizations joined and 20 committers, including Intel, ZTE, China Telecom, HuachenTel, Inspur, Yxlink, Sunyainfo, Tencent, China Unicom, Huawei, QingCloud, Netgate, Alibaba, 360, Trend Micro, Nokia, HAOHAN Data.
SAN JOSE – FD.io (“Fido”) – an open source project within The Linux Foundation’s LF Networking (LFN) – announced the availability of FD.io Vector Packet Processor (VPP) software release 20.01. With release 20.01 FD.io VPP includes multiple queue/core support with all it’s drivers including Linux TAPv2. End to end Generic Segment Offload (GSO) is also now supported. The VPP host stack supports GSO for TCP and at the driver level, VPP supports GSO across vmxnet3 on esxi, linux tap devices, and vhost-user devices for virtualization. This significantly improves VPP interaction and performance with Linux, and container solutions like Kubernetes. The same can be also said of the VPP interface with Virtual Machines whether it be with vhost (QEMU) or vmxnet3 (VMware). For an example of how using multiple queues/cores improve packet throughput let’s examine these impressive performance numbers from the Continuous System Integration and Test (CSIT) tests. VPP performance is continuously being …
SAN FRANCISCO – FD.io (“Fido”) – an open source project within The Linux Foundation’s LF Networking (LFN), specifically focused on becoming the world’s packet processing data plane for secure network infrastructure applications – today announced the availability of VPP software release 19.08. The release provides significant additions and enhancements to the Vector Packet Processing’s (VPP) network stack, host stack, and management infrastructure – furthering its breakthrough packet processing performance and strengthening ease of deployment and manageability.
Hybrid Information-Centric Networking (hICN) is a new way of thinking about networking that we are bringing to FD.io. With hICN, communications are centered around the “what” instead of the “where,” and the core network principles are pivoted toward this core idea. Rethinking networking around data instead of locations provides several advantages. Location-independent communications natively provides mobility, multi-homing, multi-path and, in general, many-to-many interactions. hICN does not secure the end-points but the data itself and provides a higher level of anonymization, so consumers can be assured that their information is safe. For many applications, traffic can scale with the amount of information exchanged, and not with the number of connected endpoints as when using unicast transport. hICN also brings information-centric principles into IPv6. For example, hICN- enabled routers do not need to be deployed everywhere in the network, but only where it matters. IP management and …
FD.io (“Fido”) – An open source project within The Linux Foundation – relentlessly focused on data speed and efficiency supporting the creation of high-performance, flexible, and scalable cloud native infrastructures, today announced the availability of its 18.01 software release. Focused on enhancements to improve Kubernetes Networking, Istio, and cloud native network functions virtualization (NFV), 18.01 is FD.io’s sixth software release. FD.io’s pure user space networking technology allows cloud native networking in Kubernetes to run entirely as a high-performance microservice in a Kubernetes pod, improving performance, latency, efficiency, maintainability, and speed of innovation. The 18.01 release includes improvements in Network Address Translation (NAT) and Access Control Lists (ACL) performance as well as flexibility to improve support for Kubernetes Service and Network Policy APIs. These improvements were incorporated into the upcoming 2.0 release of the open source Contiv …
The Fast Data Project (FD.io) released its sixth update since its inception within the Linux Foundation two years ago. While the update list is extensive, most are focused on Kubernetes networking, cloud native network functions virtualization (NFV), and Istio.
FD.io, one of Linux Foundation’s open source projects, has introduced its 18.01 software release with a focus on improving Kubernetes Networking, Istio and cloud native NFV. This is FD.io’s sixth software release to date.
Verizon and Cisco are doing something new. The two companies have announced the successful test of Cisco’s information-centric networking (ICN) software, a solution based on technology the vendor acquired from Xerox research company PARC just over a year ago, and for which Cisco has created an open source project with the Linux Foundation.
FD.io (“Fido”), relentlessly focused on data IO speed and efficiency supporting the creation of high-performance, flexible, and scalable software-defined infrastructures, today announced Huawei as the newest Platinum member. Huawei’s upgrade from Gold to Platinum demonstrates both the project’s and Huawei’s commitment to pursuing faster, more open and innovative software-based packet processing. FD.io offers the software-defined infrastructure developer community a landing site with multiple projects fostering innovations in software-based packet processing toward the creation of high-throughput, low-latency, and resource-efficient IO services suitable to many architectures (x86, ARM, and PowerPC) and deployment environments (bare metal, VM, container). Created to address gaps that exist in the open networking stack to deliver dynamic data plane services for dynamic computing environments such as cloud, containers, and network functions virtualization (NFV), the design of FD.io is …
FD.io (“Fido”), relentlessly focused on data IO speed and efficiency supporting the creation of high-performance, flexible, and scalable software defined infrastructures, today announced Arm®, Linaro, and Netgate have joined the project at the Silver level, and Canada’s Centre of Excellence in Next Generation Networking (CENGN) joins FD.io as the first Associate member. The newest members further diversify FD.io’s existing roster of chip vendors, integrators, network vendors, and service providers committed to accelerating high-performing, dynamic computing environments. FD.io offers the software defined infrastructure developer community a landing site with multiple projects fostering innovations in software-based packet processing towards the creation of high-throughput, low-latency, and resource-efficient IO services suitable to many architectures (x86, ARM, and PowerPC) and deployment environments (bare metal, VM, container). With the addition of Arm and Linaro – a leading …
The open source Fast Data Project (FD.io) announced double performance gains made possible by the latest IntelXeon Scalable processors. Intel’s new chips, which it announced this week, are designed to support data center and networking workloads. The FD.io group said the chips have helped it to double its vSwitch performance packet speeds at scale without modification to the software.