Grafting sockets for fast container networking
Grafting sockets for fast container networking
复制标题
DOI：
10.1145/3230718.3230723
复制
发表时间：
2018-07
期刊：
影响因子：
--
通讯作者：
Ryo Nakamura;Y. Sekiya;Hajime Tazaki
中科院分区：
文献类型：
--
作者：
Ryo Nakamura;Y. Sekiya;Hajime Tazaki
本文提出了一种新的快速容器联网方法，使容器中的应用程序能够在适当的访问控制下直接使用主机网络栈。我们的方法称为套接字嫁接，通过将容器中的套接字嫁接到主机网络堆栈中的套接字来提供一种新的套接字层通信通道。与最近通过使用高速分组I/O技术使网络堆栈更快的方法不同，套接字嫁接通过绕过容器的网络堆栈和虚拟接口使容器联网更快。作为套接字移植的具体实现，我们设计了一种新的套接字层地址家族--AF_GRAGET。AF_GRAGET在容器和主机网络堆栈中的两个套接字层之间执行互连。本文描述了套接字移植、AF_GRAGE的设计及其在Linux上的实现。评估结果表明，与传统的基于NAT的容器网络相比，该方法的吞吐量提高了一倍，延迟降低了23%，并提高了容器化的HTTP服务器和消息队列的网络性能。
This paper proposes a novel approach for fast container networking that enables applications in containers to utilize host network stacks directly with proper access control. Our approach, called socket-grafting, offers a new socket-layer communication channel by grafting sockets in containers onto sockets in host network stacks. In contrast to recent approaches that make network stacks faster by using high-speed packet I/O techniques, socket-grafting makes container networking faster by bypassing a container's network stack and virtual interfaces. As a concrete implementation of socket-grafting, we designed AF_GRAFT, which is a new address family for the socket layer. AF_GRAFT performs interconnection between the two socket layers in the container and host network stacks. In this paper, we describe socket-grafting, AF_GRAFT design, and its implementation on Linux. Our evaluation results demonstrate that the proposed method doubled throughput and reduced latency by 23% compared with traditional NAT-based container networking, and improved the network performance of containerized HTTP servers and message queues.