Fast and flexible: parallel packet processing with GPUs and click

作者: Robert Ricci , Weibin Sun

DOI: 10.5555/2537857.2537861

关键词:

摘要: We introduce Snap, a framework for packet processing that outperforms traditional software routers by exploiting the parallelism available on modern GPUs. While obtaining high performance, it remains extremely flexible, with tasks implemented as simple modular elements are composed to build fully functional and switches. Snap is based Click router, which extends adding new architectural features support batched processing, memory structures optimized offloading coprocessors, asynchronous scheduling in-order completion. show can run complex pipelines at speeds commodity PC hardware building an IP router incorporating both IDS-like full-packet string matcher SDN-like classifier. In this configuration, able forward 40 million packets per second, saturating four 10 Gbps NICs sizes small 128 byes. This represents increase in throughput of nearly 4x over baseline running comparable CPU.

参考文章(22)
Michalis Polychronakis, Evangelos P. Markatos, Sotiris Ioannidis, Giorgos Vasiliadis, Spiros Antonatos, Gnort: High Performance Network Intrusion Detection Using Graphics Processors recent advances in intrusion detection. pp. 116- 134 ,(2008) , 10.1007/978-3-540-87403-4_7
Sangjin Han, KyoungSoo Park, Keon Jang, Seungyeop Han, Sue Moon, SSLShader: cheap SSL acceleration with commodity processors networked systems design and implementation. pp. 1- 14 ,(2011) , 10.5555/1972457.1972459
R. Heady, G. Luger, A. Maccabe, M. Servilla, The architecture of a network level intrusion detection system Other Information: PBD: 15 Aug 1990. ,(1990) , 10.2172/425295
Martin Roesch, Snort - Lightweight Intrusion Detection for Networks usenix large installation systems administration conference. pp. 229- 238 ,(1999)
Kunyang Peng, Huichen Dai, Wei Meng, Bin Liu, Xin Tian, Yuan Zu, Zhonghu Xu, Ting Zhang, Di Yang, Qunfeng Dong, Hao Wu, Yi Wang, Wire speed name lookup: a GPU-based approach networked systems design and implementation. pp. 199- 212 ,(2013)
Brian White, Jay Lepreau, Leigh Stoller, Robert Ricci, Shashi Guruprasad, Mac Newbold, Mike Hibler, Chad Barb, Abhijeet Joglekar, An integrated experimental environment for distributed systems and networks ACM SIGOPS Operating Systems Review. ,vol. 36, pp. 255- 270 ,(2002) , 10.1145/844128.844152
Eddie Kohler, Robert Morris, Benjie Chen, John Jannotti, M. Frans Kaashoek, The click modular router ACM Transactions on Computer Systems. ,vol. 18, pp. 263- 297 ,(2000) , 10.1145/354871.354874
Weibin Sun, Robert Ricci, Matthew L. Curry, GPUstore: harnessing GPU computing for storage systems in the OS kernel acm international conference on systems and storage. pp. 9- ,(2012) , 10.1145/2367589.2367595
Joongi Kim, Seonggu Huh, Keon Jang, KyoungSoo Park, Sue Moon, The power of batching in the Click modular router Proceedings of the Asia-Pacific Workshop on Systems - APSYS '12. pp. 14- 14 ,(2012) , 10.1145/2349896.2349910
Tom Anderson, Timothy Roscoe, David Wetherall, Preventing Internet denial-of-service with capabilities acm special interest group on data communication. ,vol. 34, pp. 39- 44 ,(2004) , 10.1145/972374.972382