0 views collected around this technical thread.
This article outlines the background, architectural design, implementation details, and future roadmap of an internet‑boundary cloud firewall built on DPDK, covering physical and software structures, traffic steering, rule matching logic, and planned enhancements such as logging and traffic analysis.
This article details the design, implementation, and performance evaluation of a user‑space MPTCP stack built on DPDK, showing how a layered, zero‑copy architecture and same‑core lock‑free forwarding can boost data‑center throughput by up to 100% while reducing latency by about 10%, all while remaining compatible with existing TCP applications.
At Netdev 0x19, ByteDance's STE team presented two talks—one on a NUMA‑locality‑aware MPTCP flow‑selection strategy that can raise throughput by up to 30% and lower tail latency by 6%, and another on a DPDK‑based user‑space MPTCP stack that reduces latency by nearly 10% and more than doubles throughput—showcasing practical performance gains for data‑center networking.
This article demonstrates how to use DPDK's Graph API for L3 packet forwarding, introduces a custom ACL node, and presents performance comparisons of different packet‑transfer mechanisms and batch sizes within the graph pipeline.
This article explains the design and implementation of a DPDK‑based domain interception gateway that analyzes HTTP/HTTPS traffic, uses TCP connection hijacking and DPDK’s KNI interface to block unregistered domains, detailing architecture, packet processing flow, and the trade‑offs of this approach.
dperf is an open‑source DPDK‑based network performance and load testing tool that can generate tens of millions of HTTP connections per second, achieve hundreds of Gbps throughput, and provides detailed statistics, with usage instructions, performance benchmarks, and configuration steps for testing environments.
This article examines the Cloud Connect Network gateway architecture, identifies performance bottlenecks in the V1 packet‑forwarding process, proposes a session‑based optimization that reduces query complexity from O(n) to O(1), and validates the improvement with latency tests showing a drop from 500 ms to about 1 ms.
This article explains the architecture and implementation of the virtio/vhost device model, details how QEMU creates and initializes virtio‑net‑pci devices, describes the vhost‑user communication protocol and its integration with DPDK and the Linux vhost‑net kernel driver, and provides practical command‑line examples and code snippets.
This article explains virtual network security mechanisms, including security groups, network ACLs, QoS policies, and quality‑assurance techniques, detailing implementations with Linux Bridge, iptables, OVS, conntrack, and DPDK, and discusses active probing and passive observation for network reliability.
This article explains the origins of DPDK, describes its modular architecture and performance‑enhancing mechanisms such as UIO, hugepages, and CPU affinity, and reviews popular user‑space networking frameworks like F‑Stack and Seastar that leverage DPDK for high‑throughput cloud services.
This extensive tutorial covers the principles, installation steps, configuration details, and code examples for OVS‑DPDK virtual switching, Lagopus, MoonGen packet generation, FastClick click‑based processing, OpenFastPath, Pktgen‑DPDK, MTCP, Butterfly VM networking, OpenNet, NetBricks, F‑Stack, ThunderX NFV, DPVS, Vhost‑user networking, OpenNFP, VCL, libmoon, and a practical DPDK training curriculum, providing developers with a complete reference for building high‑performance network functions.
This article explains DPDK's memory management architecture, covering the hierarchical memory layout, hugepage discovery and mapping, shared configuration structures, NUMA‑aware allocation, custom malloc‑heap implementation, memzone and mempool creation, and the mbuf buffer model, with detailed code examples.
NVIDIA's new DOCA GPUNetIO library enables GPU‑initiated communication, allowing packets to be received directly into GPU memory, processed by CUDA kernels, and sent without CPU involvement, offering lower latency, higher scalability, and detailed pipeline examples including IP checksum, HTTP filtering, traffic forwarding, and 5G Aerial SDK integration.
The article analyzes the growing demands on network I/O, outlines Linux and x86 bottlenecks, and explains how DPDK’s user‑space bypass, UIO, PMD, and various optimization techniques such as HugePages, SIMD, and cache‑friendly design enable multi‑hundred‑million‑packet‑per‑second processing.
This article explains how to build a reliable, high‑performance load‑balancing platform by analyzing basic reliability requirements, introducing multi‑layer (DNS, L4, L7) balancing, comparing Direct‑Route, Tunnel and FULLNAT modes, and describing the VGW architecture, health‑check, fault isolation, redundancy and DPDK‑based performance optimizations.
This article investigates the performance degradation caused by DPDK memory fragmentation, explains the underlying heap and element management, presents detailed profiling and test results, and proposes two practical solutions that dramatically reduce allocation latency and improve overall system throughput.
This article analyzes the evolving demands of network I/O, identifies Linux/x86 bottlenecks, explains DPDK’s bypass architecture and UIO mechanism, and presents practical high‑performance coding and compilation optimizations such as HugePages, SIMD, poll‑mode drivers, and ecosystem tools for modern backend systems.
This article explains the need for reliable load balancing in large‑scale services, analyzes the problems of request distribution and fault isolation, and details the design of a three‑layer and four‑layer load‑balancing architecture—including DNS, Nginx, LVS, FULLNAT, and VGW—along with health‑check, redundancy, and performance optimization techniques.
This article reviews the fundamentals of token‑bucket rate limiters, identifies precision, cascading compensation, and TCP‑loss sensitivity issues, and details two major improvements—port‑loan backpressure and the Carousel algorithm—while outlining future directions for more reliable network traffic shaping.
The article details how a multi‑layer load‑balancing platform (VGW) was designed—combining 7‑layer Nginx, 4‑layer LVS with FULLNAT, and 3‑layer network devices—to achieve business reliability, fault isolation via BGP‑announced VIPs, and high‑throughput performance using DPDK, while providing redundancy at server, link, and cluster levels.