Efficient Continuous Latency Monitoring with eBPF
Efficient Continuous Latency Monitoring with eBPF
复制标题
使用 eBPF 进行高效连续延迟监控
DOI：
10.1007/978-3-031-28486-1_9
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
J. D. Brouer
中科院分区：
文献类型：
--
作者：
Simon Sundberg;A. Brunström;Simone Ferlin Oliveira;Toke Høiland;J. D. Brouer
网络延迟是许多应用程序感知体验质量的关键因素。随着人们越来越关注交互式和实时应用程序，这些应用程序需要可靠和低延迟，持续有效地监控延迟的能力变得比以往任何时候都更加重要。始终在线的被动延迟监控可以提供连续的延迟度量，而无需将任何流量注入网络。然而，随着数据包速率的增加，基于软件的监控工具通常难以跟上流量，特别是在当代的多Gbps接口上。我们调查的可行性，使用eBPF，使有效的被动网络延迟监测，通过实施一个演进的被动平（埃平）。我们的评估表明，埃平提供了准确的RTT测量，可以在单个核心上处理超过1 Mpps或相应的超过10 Gbps，大大改善了最先进的基于软件的解决方案，如PPing。
Network latency is a critical factor for the perceived quality of experience for many applications. With an increasing focus on interactive and real-time applications, which require reliable and low latency, the ability to continuously and efficiently monitor latency is becoming more important than ever. Always-on passive monitoring of latency can provide continuous latency metrics without injecting any traffic into the network. However, software-based monitoring tools often struggle to keep up with traffic as packet rates increase, especially on contemporary multi-Gbps interfaces. We investigate the feasibility of using eBPF to enable efficient passive network latency monitoring by implementing an evolved Passive Ping (ePPing). Our evaluation shows that ePPing delivers accurate RTT measurements and can handle over 1 Mpps, or correspondingly over 10 Gbps, on a single core, greatly improving on state-of-the-art software based solutions, such as PPing.