FOSDEM event "Is your elephant a gazelle? "

Fan Zhang

Type devroom

How to accelerate IPsec elephant flows

Starts on day 2 (2021-02-07) at 17:20 (Brussels time, UTC+1) in room Sdn (duration 00:20)

Matrix room #sdn:fosdem.org

Elephant flows appear irregularly, can consume almost half of the available bandwidth and are consequently associated with a host of issues. Securing elephant flows with IPsec is a well-known challenge to SDN and SD-WAN solutions on commodity hardware. The key problems for those developing solutions are:

• How to seamlessly enable dedicated HW to accelerate IPsec processing when available?

• How to distribute workloads to more CPU cores and maintain packets ordering to scale?

• How to scale up/scale down the computer resource usage when the elephant flow appears and disappears?

In this talk we will discuss our recent work done on open-source project FD.io/VPP to address the above problems. We will describe how we utilized and enriched the VPP architecture to accelerate on-demand IPsec elephant flow processing in a unified and seamless way.

=> FOSDEM schedule page