We need kernel interposition over the network dataplane
We need kernel interposition over the network dataplane
复制标题
DOI：
10.1145/3458336.3465281
复制
发表时间：
2021-06
期刊：
影响因子：
--
通讯作者：
Hugo Sadok;Zhipeng Zhao;Valerie Choung;Nirav Atre;Daniel S. Berger;J. Hoe;Aurojit Panda;Justine Sherry
中科院分区：
文献类型：
--
作者：
Hugo Sadok;Zhipeng Zhao;Valerie Choung;Nirav Atre;Daniel S. Berger;J. Hoe;Aurojit Panda;Justine Sherry
内核旁路网络允许应用程序绕过内核并直接与网卡硬件接口，它是提高应用程序网络性能的主要工具之一。然而，允许应用程序绕过内核使得不可能使用工具（例如tcpdump）或强加策略（例如QoS和过滤器）来干预主机上运行的不同应用程序发送的流量。这使得可维护性和可管理性对绕过内核的应用程序来说是一个挑战。作为回应，我们提出了内核路径插入（KOPI），其中保留了传统的内核数据平面功能，但在完全可编程的SmartNIC中实现。我们假设KOPI可以支持与内核堆栈相同的工具和策略，同时保留内核绕过的性能优势。
Kernel-bypass networking, which allows applications to circumvent the kernel and interface directly with NIC hardware, is one of the main tools for improving application network performance. However, allowing applications to circumvent the kernel makes it impossible to use tools (e.g., tcpdump) or impose policies (e.g., QoS and filters) that need to interpose on traffic sent by different applications running on a host. This makes maintainability and manageability a challenge for kernel-bypass applications. In response, we propose Kernel On-Path Interposition (KOPI), in which traditional kernel data-plane functionality is retained but implemented in a fully programmable SmartNIC. We hypothesize that KOPI can support the same tools and policies as the kernel stack while retaining the performance benefits of kernel bypass.