LinuxCon 2015 Linux Kernel Networking Walkthrough

Aug 18, 2015107 likes27,099 views

This presentation features a walk through the Linux kernel networking stack for users and developers. It will cover insights into both, existing essential networking features and recent developments and will show how to use them properly. Our starting point is the network card driver as it feeds a packet into the stack. We will follow the packet as it traverses through various subsystems such as packet filtering, routing, protocol stacks, and the socket layer. We will pause here and there to look into concepts such as networking namespaces, segmentation offloading, TCP small queues, and low latency polling and will discuss how to configure them.

Kernel Networking Walkthrough
LinuxCon 2015, Seattle
Thomas Graf
Kernel & Open vSwitch Team
Noiro Networks (Cisco)

Agenda
● Getting packets from/to the NIC
● NAPI, Busy Polling, RSS, RPS, XPS, GRO, TSO
● Packet processing
● RX Handler, IP Processing, TCP Processing, TCP Fast Open
● Queuing from/to userspace
● Socket Buffers, Flow Control, TCP Small Queues
● Q&A

Touring the Network Stack
Expectation Reality

How does a packet get in and out of
the Network Stack?

Receive & Transmit Process
Ring Buffer
DMA
Parse
L2 & IP
Parse
TCP/UDP
Socket Buffer
Task /
Container
read()
Ring Buffer
Construct
IP
Construct
TCP/UDP
Local?
Socket Buffer
Forward
Route?
write()
NIC Network Stack
(Kernel Space)
Process
(User Space)

The 3 ways into the Network Stack
Ring Buffer
Network
Stack
Interrupt Driven
A
Ring Buffer
Network
Stack
NAPI based Polling poll()
B
Ring Buffer Network
Stack
Busy Polling busy_poll()
Task
C

RSS – Receive Side Scaling
● NIC distributes packets across multiple RX queues
allowing for parallel processing.
● Separate IRQ per RX queue, thus selects CPU to run
hardware interrupt handler on.
RX-queue-1
RX-queue-2
RX-queue-3
RX-queue-4
CPU 1
CPU 2
CPU 1
CPU 2
filter

RPS – Receive Packet Steering
● Software filter to select CPU # for processing
● Use it to ...
RX-queue-1
RX-queue-2
RX-queue-3
RX-queue-4
CPU 1
CPU 2
CPU 3
CPU 1
CPU 2
CPU 3
... redo queue - CPU mapping ... distribute single queue to
multiple CPUs

Hardware Offload
● RX/TX Checksumming
● Perform CPU intensive checksumming in
hardware.
● Virtual LAN filtering and tag stripping
● Strip 802.1Q header and store VLAN ID
in network packet meta data.
● Filter out unsubscribed VLANs.
● Segmentation Offload

Generic Receive Offload
(ethtool -K eth0 gro on)
Ring Buffer
Network
Stack
poll()
NAPI based GRO
MTU
GRO
Up to 64K
It's more effective to process 1x64K bytes packet
instead of 40x1500 bytes packets.

Segmentation Offload
(ethtool -K eth0 tso on)
(ethtool -K eth0 gso on)
Ring Buffer
Network
Stack
Generic Segmentation Offload (GSO)
ethtool -K eth0 gso on
MTU
TCP Segmentation Offload (TSO)
ethtool -K eth0 tso on
MTU
Up to 64K

How does a packet get through the
Network Stack?
(c) Karen Sagovac

Most read

$Socket Buffers & Flow Control (net.ipv4.tcp_{r|w}mem) ssh TX Ring Buffer TCP/IP Socket Buffer wmem overlimit? Block or EWOULDBLOCK wmem += packet-size ssh RX Ring Buffer TCP/IP Socket Buffer rmem -= packet-size rmem overlimit? Reduce TCP Window rmem += packet-size wmem -= packet-size write()$

TCP Small Queues
(net.ipv4.tcp_limit_output_bytes)
ssh
TX Ring Buffer
Driver
TCP/IP
Socket Buffer
write()
Queuing Discipline
torrent
Socket Buffer
write()
TSQ: max 128Kb in flight per socket

Q&A
Contact:
● E-Mail: tgraf@suug.ch
● Twitter: @tgraf__

Packet Processing
Link Layer
Ingress QoS
Proto Handler
IPv4
IPv6
ARP
IPX
...
Drop
The Feast!
RX Handler
Open vSwitch
Team
Bonding
Bridge
macvlan
macvtap
Packet Socket
ETH_P_ALL
tcpdump

IP Processing
IP
Handler Route Lookup
PREROUTING
IPv4
Construction
Route Lookup
Local Output
OUTPUT
POSTROUTINGLink Layer
FORWARD
Forwarding
L4
(TCP, ...)
Local Delivery
INPUT
User
Space

TCP Processing
IP
Socket Filter
Receive TCP
Parse TCP
Lookup Socket
Backlog
socket locked
Receive Socket Buffer
Prequeue
task exists
process context ← softirq
Task
poll()read()

TCP Fast Open
(net.ipv4.tcp_fastopen)
2nd
Req SYN
SYN+ACK
ACK+HTTP GET
Data
2x RTT
SYN+Cookie+HTTP GET
SYN+ACK+Data
2nd
Req
1x RTT
Client Server
SYN
SYN+ACK
ACK+HTTP GET
1st
Req
Data
2x RTT2x RTT
Regular
Client Server
SYN
SYN+ACK+Cookie
ACK+HTTP GET
1st
Req
Data
2x RTT
Fast Open

Linux offers an extensive selection of programmable and configurable networking components from traditional bridges, encryption, to container optimized layer 2/3 devices, link aggregation, tunneling, several classification and filtering languages all the way up to full SDN components. This talk will provide an overview of many Linux networking components covering the Linux bridge, IPVLAN, MACVLAN, MACVTAP, Bonding/Team, OVS, classification & queueing, tunnel types, hidden routing tricks, IPSec, VTI, VRF and many others.

Fun with Network InterfacesKernel TLV

Agenda: In this session, Shmulik Ladkani discusses the kernel's net_device abstraction, its interfaces, and how net-devices interact with the network stack. The talk covers many of the software network devices that exist in the Linux kernel, the functionalities they provide and some interesting use cases. Speaker: Shmulik Ladkani is a Tech Lead at Ravello Systems. Shmulik started his career at Jungo (acquired by NDS/Cisco) implementing residential gateway software, focusing on embedded Linux, Linux kernel, networking and hardware/software integration. 51966 coffees and billions of forwarded packets later, with millions of homes running his software, Shmulik left his position as Jungo’s lead architect and joined Ravello Systems (acquired by Oracle) as tech lead, developing a virtual data center as a cloud service. He's now focused around virtualization systems, network virtualization and SDN.

Linux Network StackAdrien Mahieux

- The document discusses Linux network stack monitoring and configuration. It begins with definitions of key concepts like RSS, RPS, RFS, LRO, GRO, DCA, XDP and BPF. - It then provides an overview of how the network stack works from the hardware interrupts and driver level up through routing, TCP/IP and to the socket level. - Monitoring tools like ethtool, ftrace and /proc/interrupts are described for viewing hardware statistics, software stack traces and interrupt information.

The linux networking architecturehugo lu

The document discusses Linux networking architecture and covers several key topics in 3 paragraphs or less: It first describes the basic structure and layers of the Linux networking stack including the network device interface, network layer protocols like IP, transport layer, and sockets. It then discusses how network packets are managed in Linux through the use of socket buffers and associated functions. The document also provides an overview of the data link layer and protocols like Ethernet, PPP, and how they are implemented in Linux.

Faster packet processing in Linux: XDPDaniel T. Lee

SOSCON 2019.10.17 What are the methods for packet processing on Linux? And how fast are each packet processing methods? In this presentation, we will learn how to handle packets on Linux (User space, socket filter, netfilter, tc), and compare performance with analysis of where each packet processing is done in the network stack (hook point). Also, we will discuss packet processing using XDP, an in-kernel fast-path recently added to the Linux kernel. eXpress Data Path (XDP) is a high-performance programmable network data-path within the Linux kernel. The XDP is located at the lowest level of access through SW in the network stack, the point at which driver receives the packet. By using the eBPF infrastructure at this hook point, the network stack can be expanded without modifying the kernel. Daniel T. Lee (Hoyeon Lee) @danieltimlee Daniel T. Lee currently works as Software Engineer at Kosslab and contributing to Linux kernel BPF project. He has interest in cloud, Linux networking, and tracing technologies, and likes to analyze the kernel's internal using BPF technology.

netfilter and iptablesKernel TLV

netfilter is a framework provided by the Linux kernel that allows various networking-related operations to be implemented in the form of customized handlers. iptables is a user-space application program that allows a system administrator to configure the tables provided by the Linux kernel firewall (implemented as different netfilter modules) and the chains and rules it stores. Many systems use iptables/netfilter, Linux's native packet filtering/mangling framework since Linux 2.4, be it home routers or sophisticated cloud network stacks. In this session, we will talk about the netfilter framework and its facilities, explain how basic filtering and mangling use-cases are implemented using iptables, and introduce some less common but powerful extensions of iptables. Shmulik Ladkani, Chief Architect at Nsof Networks. Long time network veteran and kernel geek. Shmulik started his career at Jungo (acquired by NDS/Cisco) implementing residential gateway software, focusing on embedded Linux, Linux kernel, networking and hardware/software integration. Some billions of forwarded packets later, Shmulik left his position as Jungo's lead architect and joined Ravello Systems (acquired by Oracle) as tech lead, developing a virtual data center as a cloud-based service, focusing around virtualization systems, network virtualization and SDN. Recently he co-founded Nsof Networks, where he's been busy architecting network infrastructure as a cloud-based service, gazing at internet routes in astonishment, and playing the chkuku.

DevConf 2014 Kernel Networking WalkthroughThomas Graf

This presentation features a walk through the Linux kernel networking stack covering the essentials and recent developments a developer needs to know. Our starting point is the network card driver as it feeds a packet into the stack. We will follow the packet as it traverses through various subsystems such as packet filtering, routing, protocol stacks, and the socket layer. We will pause here and there to look into concepts such as segmentation offloading, TCP small queues, and low latency polling. We will cover APIs exposed by the kernel that go beyond use of write()/read() on sockets and will look into how they are implemented on the kernel side.

OpenvSwitch Deep Diverajdeep

Understanding DPDKDenys Haryachyy

1. DPDK achieves high throughput packet processing on commodity hardware by reducing kernel overhead through techniques like polling, huge pages, and userspace drivers. 2. In Linux, packet processing involves expensive operations like system calls, interrupts, and data copying between kernel and userspace. DPDK avoids these by doing all packet processing in userspace. 3. DPDK uses techniques like isolating cores for packet I/O threads, lockless ring buffers, and NUMA awareness to further optimize performance. It can achieve throughput of over 14 million packets per second on 10GbE interfaces.

BPF: Tracing and moreBrendan Gregg

Video: https://www.youtube.com/watch?v=JRFNIKUROPE . Talk for linux.conf.au 2017 (LCA2017) by Brendan Gregg, about Linux enhanced BPF (eBPF). Abstract: A world of new capabilities is emerging for the Linux 4.x series, thanks to enhancements that have been included in Linux for to Berkeley Packet Filter (BPF): an in-kernel virtual machine that can execute user space-defined programs. It is finding uses for security auditing and enforcement, enhancing networking (including eXpress Data Path), and performance observability and troubleshooting. Many new open source tools that have been written in the past 12 months for performance analysis that use BPF. Tracing superpowers have finally arrived for Linux! For its use with tracing, BPF provides the programmable capabilities to the existing tracing frameworks: kprobes, uprobes, and tracepoints. In particular, BPF allows timestamps to be recorded and compared from custom events, allowing latency to be studied in many new places: kernel and application internals. It also allows data to be efficiently summarized in-kernel, including as histograms. This has allowed dozens of new observability tools to be developed so far, including measuring latency distributions for file system I/O and run queue latency, printing details of storage device I/O and TCP retransmits, investigating blocked stack traces and memory leaks, and a whole lot more. This talk will summarize BPF capabilities and use cases so far, and then focus on its use to enhance Linux tracing, especially with the open source bcc collection. bcc includes BPF versions of old classics, and many new tools, including execsnoop, opensnoop, funcccount, ext4slower, and more (many of which I developed). Perhaps you'd like to develop new tools, or use the existing tools to find performance wins large and small, especially when instrumenting areas that previously had zero visibility. I'll also summarize how we intend to use these new capabilities to enhance systems analysis at Netflix.

The TCP/IP Stack in the Linux KernelDivye Kapoor

The document discusses various data structures and functions related to network packet processing in the Linux kernel socket layer. It describes the sk_buff structure that is used to pass packets between layers. It also explains the net_device structure that represents a network interface in the kernel. When a packet is received, the interrupt handler will raise a soft IRQ for processing. The packet will then traverse various protocol layers like IP and TCP to be eventually delivered to a socket and read by a userspace application.

DPDK In DepthKernel TLV

DPDK in depth This document provides an overview of DPDK (Data Plane Development Kit): 1. DPDK is an open source project for data plane programming and network acceleration. It started at Intel in 2010 and is now maintained by the Linux Foundation. 2. DPDK provides poll mode drivers (PMDs), libraries, and sample applications for fast packet processing. It uses hugepages and avoids kernel involvement for high performance. 3. The document outlines several DPDK projects, libraries, PMDs, advantages and disadvantages, development process, and demonstrates a simple DPDK application (l2fwd) and the testpmd tool.

Tutorial: Using GoBGP as an IXP connecting routerShu Sugimoto

DPDK KNI interfaceDenys Haryachyy

eBPF - Rethinking the Linux KernelThomas Graf

The Linux kernel is undergoing the most fundamental architecture evolution in history and is becoming a microkernel. Why is the Linux kernel evolving into a microkernel? The potentially biggest fundamental change ever happening to the Linux kernel. This talk covers how companies like Facebook and Google use BPF to patch 0-day exploits, how BPF will change the way features are added to the kernel forever, and how BPF is introducing a new type of application deployment method for the Linux kernel.

Understanding eBPF in a Hurry!Ray Jenkins

eBPF is an exciting new technology that is poised to transform Linux performance engineering. eBPF enables users to dynamically and programatically trace any kernel or user space code path, safely and efficiently. However, understanding eBPF is not so simple. The goal of this talk is to give audiences a fundamental understanding of eBPF, how it interconnects existing Linux tracing technologies, and provides a powerful aplatform to solve any Linux performance problem.

Tracing MariaDB server with bpftrace - MariaDB Server Fest 2021Valeriy Kravchuk

Bpftrace is a relatively new eBPF-based open source tracer for modern Linux versions (kernels 5.x.y) that is useful for analyzing production performance problems and troubleshooting software. Basic usage of the tool, as well as bpftrace one liners and advanced scripts useful for MariaDB DBAs are presented. Problems of MariaDB Server dynamic tracing with bpftrace and some possible solutions and alternative tracing tools are discussed.

Overview of Distributed Virtual Router (DVR) in Openstack/Neutronvivekkonnect

The document discusses distributed virtual routers (DVR) in OpenStack Neutron. It describes the high-level architecture of DVR, which distributes routing functions from network nodes to compute nodes to improve performance and scalability compared to legacy centralized routing. Key aspects covered include east-west and north-south routing mechanisms, configuration, agent operation modes, database extensions, scheduling, and support for services. Plans are outlined for enhancing DVR in upcoming OpenStack releases.

Staring into the eBPF AbyssSasha Goldshtein

eBPF (extended Berkeley Packet Filters) is a modern kernel technology that can be used to introduce dynamic tracing into a system that wasn't prepared or instrumented in any way. The tracing programs run in the kernel, are guaranteed to never crash or hang your system, and can probe every module and function -- from the kernel to user-space frameworks such as Node and Ruby. In this workshop, you will experiment with Linux dynamic tracing first-hand. First, you will explore BCC, the BPF Compiler Collection, which is a set of tools and libraries for dynamic tracing. Many of your tracing needs will be answered by BCC, and you will experiment with memory leak analysis, generic function tracing, kernel tracepoints, static tracepoints in user-space programs, and the "baked" tools for file I/O, network, and CPU analysis. You'll be able to choose between working on a set of hands-on labs prepared by the instructors, or trying the tools out on your own test system. Next, you will hack on some of the bleeding edge tools in the BCC toolkit, and build a couple of simple tools of your own. You'll be able to pick from a curated list of GitHub issues for the BCC project, a set of hands-on labs with known "school solutions", and an open-ended list of problems that need tools for effective analysis. At the end of this workshop, you will be equipped with a toolbox for diagnosing issues in the field, as well as a framework for building your own tools when the generic ones do not suffice.

The Linux Block Layer - Built for Fast StorageKernel TLV

The arrival of flash storage introduced a radical change in performance profiles of direct attached devices. At the time, it was obvious that Linux I/O stack needed to be redesigned in order to support devices capable of millions of IOPs, and with extremely low latency. In this talk we revisit the changes the Linux block layer in the last decade or so, that made it what it is today - a performant, scalable, robust and NUMA-aware subsystem. In addition, we cover the new NVMe over Fabrics support in Linux. Sagi Grimberg Sagi is Principal Architect and co-founder at LightBits Labs.

BPF Internals (eBPF)Brendan Gregg

USENIX LISA2021 talk by Brendan Gregg (https://www.youtube.com/watch?v=_5Z2AU7QTH4). This talk is a deep dive that describes how BPF (eBPF) works internally on Linux, and dissects some modern performance observability tools. Details covered include the kernel BPF implementation: the verifier, JIT compilation, and the BPF execution environment; the BPF instruction set; different event sources; and how BPF is used by user space, using bpftrace programs as an example. This includes showing how bpftrace is compiled to LLVM IR and then BPF bytecode, and how per-event data and aggregated map data are fetched from the kernel.

Linux kernel tracingViller Hsiao

This document discusses tracing in the Linux kernel. It describes various tracing mechanisms like ftrace, tracepoints, kprobes, perf, and eBPF. Ftrace allows tracing functions via compiler instrumentation or dynamically. Tracepoints define custom trace events that can be inserted at specific points. Kprobes and related probes like jprobes allow tracing kernel functions. Perf provides performance monitoring capabilities. eBPF enables custom tracing programs to be run efficiently in the kernel via just-in-time compilation. Tracing tools like perf, systemtap, and LTTng provide user interfaces.

Introduction to DPDKKernel TLV

DPDK is a set of drivers and libraries that allow applications to bypass the Linux kernel and access network interface cards directly for very high performance packet processing. It is commonly used for software routers, switches, and other network applications. DPDK can achieve over 11 times higher packet forwarding rates than applications using the Linux kernel network stack alone. While it provides best-in-class performance, DPDK also has disadvantages like reduced security and isolation from standard Linux services.

Understanding Open vSwitch YongKi Kim

Open vSwitch - Stateful Connection Tracking & Stateful NATThomas Graf

DPDK: Multi Architecture High Performance Packet ProcessingMichelle Holley

CCIE_RS_Quick_Review_KitChris S Chen

This document provides an overview and summary of Frame Relay and PPP technologies: - Frame Relay uses DLCI to identify virtual circuits and supports fragmentation, congestion control, and inverse ARP for L2-L3 mapping. PPPoE can be used to transport PPP over Frame Relay. - PPP supports authentication using PAP or CHAP and can be used to provide remote access over various WAN links like Frame Relay. - Multilink PPP allows combining multiple physical links to be treated as a single logical link and provides increased throughput and redundancy.

CCIE Lahcene Berkani

This Booklet is designed to help CCIE candidates to prepare themselves for the CCIE written and/or the lab exam. However, this is not a complete study reference. It is just a series of the author’s personal notes, written down during his pre-lab, and further studies, in a form of mind maps, based mainly on CISCO Documentation for IOS 12.4T. The main goal of this material is to provide quick and easy-to-skim method of refreshing cadidate’s existing knowledge. All effort has been made to make this Booklet as precise and correct as possible, but no warranty is implied. CCIE candidates are strongly encouradged to prepare themselves using other comprehensive study materials like Cisco Documentation (www.cisco.com/web/psa/products/index.html), Cisco Press books (www.ciscopress.com), and other well-known vendor’s products, before going through this Booklet. The autor of this Booklet takes no responsibility, nor liablity to any person or entity with respect to loss of any information or failed tests or exams arising from the information contained in this Booklet.

More Related Content

What's hot (20)

DevConf 2014 Kernel Networking WalkthroughThomas Graf

OpenvSwitch Deep Diverajdeep

Understanding DPDKDenys Haryachyy

BPF: Tracing and moreBrendan Gregg

The TCP/IP Stack in the Linux KernelDivye Kapoor

DPDK In DepthKernel TLV

Tutorial: Using GoBGP as an IXP connecting routerShu Sugimoto

DPDK KNI interfaceDenys Haryachyy

eBPF - Rethinking the Linux KernelThomas Graf

Understanding eBPF in a Hurry!Ray Jenkins

Tracing MariaDB server with bpftrace - MariaDB Server Fest 2021Valeriy Kravchuk

Overview of Distributed Virtual Router (DVR) in Openstack/Neutronvivekkonnect

Staring into the eBPF AbyssSasha Goldshtein

The Linux Block Layer - Built for Fast StorageKernel TLV

BPF Internals (eBPF)Brendan Gregg

Linux kernel tracingViller Hsiao

Introduction to DPDKKernel TLV

Understanding Open vSwitch YongKi Kim

Open vSwitch - Stateful Connection Tracking & Stateful NATThomas Graf

DPDK: Multi Architecture High Performance Packet ProcessingMichelle Holley

DevConf 2014 Kernel Networking WalkthroughThomas Graf

OpenvSwitch Deep Diverajdeep

Understanding DPDKDenys Haryachyy

BPF: Tracing and moreBrendan Gregg

The TCP/IP Stack in the Linux KernelDivye Kapoor

DPDK In DepthKernel TLV

Tutorial: Using GoBGP as an IXP connecting routerShu Sugimoto

DPDK KNI interfaceDenys Haryachyy

eBPF - Rethinking the Linux KernelThomas Graf

Understanding eBPF in a Hurry!Ray Jenkins

Tracing MariaDB server with bpftrace - MariaDB Server Fest 2021Valeriy Kravchuk

Overview of Distributed Virtual Router (DVR) in Openstack/Neutronvivekkonnect

Staring into the eBPF AbyssSasha Goldshtein

The Linux Block Layer - Built for Fast StorageKernel TLV

BPF Internals (eBPF)Brendan Gregg

Linux kernel tracingViller Hsiao

Introduction to DPDKKernel TLV

Understanding Open vSwitch YongKi Kim

Open vSwitch - Stateful Connection Tracking & Stateful NATThomas Graf

DPDK: Multi Architecture High Performance Packet ProcessingMichelle Holley

Similar to LinuxCon 2015 Linux Kernel Networking Walkthrough (20)

CCIE_RS_Quick_Review_KitChris S Chen

CCIE Lahcene Berkani

Cisco -Ccie rs quick_review_kitStoyan Stoyanov

This document provides an overview and summary of Frame Relay and PPP technologies: - Frame Relay uses DLCI to identify virtual circuits and supports point-to-point, multipoint, and hub-and-spoke topologies. It uses LMI, inverse ARP, and static mappings for L2-L3 address resolution. - PPP can be used over Frame Relay virtual circuits to provide routing between sites. A virtual-template interface is used to represent each PPP session. - Authentication for PPP connections can be provided by PAP or CHAP protocols. CHAP provides one-way authentication via a three-way handshake by default.

Using Mikrotik Switch Features to Improve Your Network GLC Networks

Webinar topic: Using Mikrotik Switch Features to Improve Your Network Presenter: Achmad Mardiansyah In this webinar series, we will discuss about Using Mikrotik Switch Features to Improve Your Network Please share your feedback or webinar ideas here: http://bit.ly/glcfeedback Check our schedule for future events: https://www.glcnetworks.com/en/schedule/ Follow our social media for updates: Facebook, Instagram, YouTube Channel, and telegram also discord Recording available on Youtube https://youtu.be/mqrI_szjzR0

Enterprise network design multi layer network and security.pptxbipinbhattarai12

5 продвинутых технологий Cisco, которые нужно знатьSkillFactory

Руслан Савченко, инструктор онлайн-школы SkillFactory – о самом интересном из программы курсов CCNP Route и CCNP Switch от Cisco и о том, какие знания в области маршрутизации и коммутации нужно иметь, чтобы решать по-настоящему сложные задачи.

Best practices for catalyst 4500 4000, 5500-5000, and 6500-6000 series switch...abdenour boussioud

This document provides best practices for configuring Cisco Catalyst 4500/4000, 5500/5000, and 6500/6000 series switches running CatOS. It discusses protocols like CDP, DTP, STP, EtherChannel and VLAN Trunking Protocol that are used for switch-to-switch communication. It also covers management topics such as SNMP, syslog, NTP and security configurations using features like TACACS+. The document is divided into sections on basic configuration, management, security and a configuration checklist.

High performace network of Cloud Native Taiwan User GroupHungWei Chiu

The document discusses high performance networking and summarizes a presentation about improving network performance. It describes drawbacks of the current Linux network stack, including kernel overhead and data copying. It then discusses approaches like DPDK and RDMA that can help improve performance by reducing overhead and enabling zero-copy data transfers. A case study is presented on using RDMA to improve TensorFlow performance by eliminating unnecessary data copies between devices.

Switching techniques in networking and useslochanraj1

linux networking laboratory presentation .pptxAnuradhaJadiya1

Ccna3 mod9-vtpMilton Bengui

- VLAN Trunking Protocol (VTP) allows VLAN configurations to be consistently maintained across a common administrative domain to reduce complexity and inconsistencies when changes are made. VTP advertisements containing VLAN information are transmitted over trunk links and switches inherit the sending switch's VTP domain name. VTP uses revision numbers, starting at 0 and incrementing with each change, to determine if received information is more recent than the local configuration.

Packet Walk(s) In KubernetesDon Jayakody

When it comes to networking inside Kubernetes, selecting the correct networking solution may be one of the most important decisions you may face. This is especially true if you are trying to run a Kubernetes cluster in production. Therefore it's beneficial to have a good understanding of different CNI options out there and most importantly how these networking options are different from each other. This presentation goes over packet by packet-level details of how the network plumbing is happening with different CNI plugins including, Flannel, Calico & Cilium.

packet traveling (pre cloud)iman darabi

Geep networking stack-linuxkernelKiran Divekar

Hp a5500Michel Hidalgo

This document describes a series of Gigabit Ethernet switches that provide security, reliability, and multiservice support for enterprise and SMB networks. Key features include high expandability, premium security, multilayer reliability, OpenFlow support, and quality of service capabilities. The switches support up to 48 Gigabit Ethernet ports, Power over Ethernet, optional 10GbE ports, and are available with dual power supplies for high availability applications.

Huawei_HCNA_Routing_and_Switching.pdfPauloDiniz60

This document provides an overview of the theoretical and practical training topics covered in an enterprise networking course. The theoretical training section begins with entry-level topics such as network cabling, Ethernet standards, IP addressing, switching concepts, routing protocols, and wireless networking. It then progresses to intermediate-level topics such as VLANs, link aggregation, IPv6, network management, and security. The practical training section focuses on hands-on labs for entry-level and intermediate-level topics. Mock exams are also used to help students prepare for certification exams.

12 ethernet-wifiOlivier Bonaventure

Mikrotik Bridge Deep DiveGLC Networks

Webinar topic: Mikrotik Bridge Deep Dive Presenter: Achmad Mardiansyah In this webinar series, we will discuss about Mikrotik Bridge Deep Dive Please share your feedback or webinar ideas here: http://bit.ly/glcfeedback Check our schedule for future events: https://www.glcnetworks.com/en/schedule/ Follow our social media for updates: Facebook, Instagram, YouTube Channel, and telegram also discord Recording available on Youtube https://youtu.be/AISGc9AGJtE

L2/L3 für Fortgeschrittene - Helle und dunkle Magie im Linux-NetzwerkstackMaximilan Wilhelm

This document provides an overview of networking concepts in Linux including layer 2 and layer 3 topics. It discusses link aggregation (LAGs), VLANs, bridges, routing tables, policy-based routing (PBR), VRFs, and network namespaces (NetNS). Key points covered include using LACP for LAGs, VLAN tagging formats, the purpose of bridges, routing tables other than the default main table, and how VRFs and NetNS provide layer 3 and layer 1 separation respectively. Real-world applications of tunnels and VPNs with VRFs are also highlighted.

introduction to linux kernel tcp/ip ptocotol stack monad bobo

This document provides an introduction and overview of the networking code in the Linux kernel source tree. It discusses the different layers including link (L2), network (L3), and transport (L4) layers. It describes the input and output processing, device interfaces, traffic directions, and major developers for each layer. Config and benchmark tools are also mentioned. Resources for further learning about the Linux kernel networking code are provided at the end.

CCIE_RS_Quick_Review_KitChris S Chen

CCIE Lahcene Berkani

Cisco -Ccie rs quick_review_kitStoyan Stoyanov

Using Mikrotik Switch Features to Improve Your Network GLC Networks

Enterprise network design multi layer network and security.pptxbipinbhattarai12

5 продвинутых технологий Cisco, которые нужно знатьSkillFactory

Best practices for catalyst 4500 4000, 5500-5000, and 6500-6000 series switch...abdenour boussioud

High performace network of Cloud Native Taiwan User GroupHungWei Chiu

Switching techniques in networking and useslochanraj1

linux networking laboratory presentation .pptxAnuradhaJadiya1

Ccna3 mod9-vtpMilton Bengui

Packet Walk(s) In KubernetesDon Jayakody

packet traveling (pre cloud)iman darabi

Geep networking stack-linuxkernelKiran Divekar

Hp a5500Michel Hidalgo

Huawei_HCNA_Routing_and_Switching.pdfPauloDiniz60

12 ethernet-wifiOlivier Bonaventure

Mikrotik Bridge Deep DiveGLC Networks

L2/L3 für Fortgeschrittene - Helle und dunkle Magie im Linux-NetzwerkstackMaximilan Wilhelm

introduction to linux kernel tcp/ip ptocotol stack monad bobo

More from Thomas Graf (16)

BPF & Cilium - Turning Linux into a Microservices-aware Operating SystemThomas Graf

Container runtimes cause Linux to return to its original purpose: to serve applications interacting directly with the kernel. At the same time, the Linux kernel is traditionally difficult to change and its development process is full of myths. A new efficient in-kernel programming language called eBPF is changing this and allows everyone to extend existing kernel components or glue them together in new forms without requiring to change the kernel itself.

Cilium - Bringing the BPF Revolution to Kubernetes Networking and SecurityThomas Graf

BPF is one of the fastest emerging technologies of the Linux kernel. The talk provides an introduction to Cilium which brings the powers of BPF to Kubernetes and other orchestration systems to provide highly scalable and efficient networking, security and load balancing for containers and microservices. The talk will provide an introduction to the capabilities of Cilium today but also deep dives into the emerging roadmap involving networking at the socket layer and service mesh datapath capabilities to provide highly efficient connectivity between cloud native apps and sidecar proxies.

Accelerating Envoy and Istio with Cilium and the Linux KernelThomas Graf

The document discusses how Cilium can accelerate Envoy and Istio by using eBPF/XDP to provide transparent acceleration of network traffic between Kubernetes pods and sidecars without any changes required to applications or Envoy. Cilium also provides features like service mesh datapath, network security policies, load balancing, and visibility/tracing capabilities. BPF/XDP in Cilium allows for transparent TCP/IP acceleration during the data phase of communications between pods and sidecars.

Cilium - API-aware Networking and Security for Containers based on BPFThomas Graf

Cilium provides network security and visibility for microservices. It uses eBPF/XDP to provide fast and scalable networking and security controls at layers 3-7. Key features include identity-based firewalling, load balancing, and mutual TLS authentication between services. It integrates with Kubernetes to apply network policies using standard Kubernetes resources and custom CiliumNetworkPolicy resources for finer-grained control.

Cilium - Network security for microservicesThomas Graf

The document discusses how BPF and XDP are revolutionizing network security and performance for microservices. BPF allows profiling, tracing, and running programs at the network driver level. It also enables highly performant networking functions like DDoS mitigation using XDP. Cilium uses BPF to provide layer 3-7 network security for microservices with policies based on endpoints, identities, and HTTP protocols. It integrates with Kubernetes to define network policies and secure microservice communication and APIs using eBPF programs for filtering and proxying.

DockerCon 2017 - Cilium - Network and Application Security with BPF and XDPThomas Graf

This talk will start with a deep dive and hands on examples of BPF, possibly the most promising low level technology to address challenges in application and network security, tracing, and visibility. We will discuss how BPF evolved from a simple bytecode language to filter raw sockets for tcpdump to the a JITable virtual machine capable of universally extending and instrumenting both the Linux kernel and user space applications. The introduction is followed by a concrete example of how the Cilium open source project applies BPF to solve networking, security, and load balancing for highly distributed applications. We will discuss and demonstrate how Cilium with the help of BPF can be combined with distributed system orchestration such as Docker to simplify security, operations, and troubleshooting of distributed applications.

Linux Native, HTTP Aware Network SecurityThomas Graf

Cilium is open source software for transparently securing the network connectivity between application services deployed using Linux container management platforms like Docker and Kubernetes. At the foundation of Cilium is a new Linux kernel technology called BPF, which enables the dynamic insertion of powerful security visibility and control logic within Linux itself. Because BPF runs inside the Linux kernel itself, Cilium security policies can be applied and updated without any changes to the application code or container configuration.

BPF: Next Generation of Programmable DatapathThomas Graf

Cilium - Container Networking with BPF & XDPThomas Graf

This talk demonstrates that programmability and performance does not require user space networking, it can be achieved in the kernel by generating BPF programs and leveraging the existing kernel subsystems. We will demo an early prototype which provides fast IPv6 & IPv4 connectivity to containers, container labels based security policy with avg cost O(1), and debugging and monitoring based on the per-cpu perf ring buffer. We encourage a lively discussion on the approach taken and next steps.

Cilium - BPF & XDP for containersThomas Graf

The document discusses a cluster-wide label ID table that allows for efficient policy enforcement across frontend, backend, and load balancer systems. A single hash table lookup is needed regardless of policy complexity thanks to an ID carried in network packets. Benchmark results show the approach can efficiently handle everything from small HTTP requests to ultra HD videos even with 10,000 policies on a 24-core server.

Cilium - Fast IPv6 Container Networking with BPF and XDPThomas Graf

We present a new open source project which provides IPv6 networking for Linux Containers by generating programs for each individual container on the fly and then runs them as JITed BPF code in the kernel. By generating and compiling the code, the program is reduced to the minimally required feature set and then heavily optimised by the compiler as parameters become plain variables. The upcoming addition of the Express Data Plane (XDP) to the kernel will make this approach even more efficient as the programs will get invoked directly from the network driver.

LinuxCon 2015 Stateful NAT with OVSThomas Graf

As containers are being deployed as part of multi tenant clusters, virtual multi layer switches become essential to interconnect containers while providing isolation guarantees. Assigning tenants their own private networks requires stateful network address translation (NAT) implemented in a scalable architecture to expose containers to public networks. Existing virtual switches integrated into the Linux kernel did not support stateful NAT so far. This presentation introduces a new virtual NAT service deployable as container built using existing kernel functionality such as network namespaces, routing rules and Netfilter to provide NAT services to existing virtual switches such as Open vSwitch and the Linux bridge but also the core L3 layer of Linux.

Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)Thomas Graf

Open vSwitch (OVS) has long been a critical component of the Neutron's reference implementation, offering reliable and flexible virtual switching for cloud environments. Being an early adopter of the OVS technology, Neutron's reference implementation made some compromises to stay within the early, stable featureset OVS exposed. In particular, Security Groups (SG) have been so far implemented by leveraging hybrid Linux Bridging and IPTables, which come at a significant performance overhead. However, thanks to recent developments and ongoing improvements within the OVS community, we are now able to implement feature-complete security groups directly within OVS. In this talk we will summarize the existing Security Groups implementation in Neutron and compare its performance with the Open vSwitch-only approach. We hope this analysis will form the foundation of future improvements to the Neutron Open vSwitch reference design.

2015 FOSDEM - OVS Stateful ServicesThomas Graf

This document discusses Open vSwitch and its support for stateful services like connection tracking (conntrack) and network address translation (NAT). Open vSwitch is designed to manage overlay networks and provides programmable flow tables and remote management. It aims to integrate conntrack to enable stateful firewalling and NAT functions. This will allow matching on connection states and leveraging existing Linux conntrack and NAT modules. Examples are given of how conntrack and NAT rules could be implemented using these new Open vSwitch capabilities.

The Next Generation Firewall for Red Hat Enterprise Linux 7 RCThomas Graf

SDN & NFV Introduction - Open Source Data Center NetworkingThomas Graf

This document introduces software defined networking (SDN) and network functions virtualization (NFV) concepts. It discusses challenges with traditional networking and how SDN and NFV address these by decoupling the control and data planes, centralizing network intelligence, and abstracting the underlying network infrastructure. It then provides examples of open source SDN technologies like OpenDaylight, Open vSwitch, and OpenStack that can be used to build programmable software-defined networks and virtualized network functions.

BPF & Cilium - Turning Linux into a Microservices-aware Operating SystemThomas Graf

Cilium - Bringing the BPF Revolution to Kubernetes Networking and SecurityThomas Graf

Accelerating Envoy and Istio with Cilium and the Linux KernelThomas Graf

Cilium - API-aware Networking and Security for Containers based on BPFThomas Graf

Cilium - Network security for microservicesThomas Graf

DockerCon 2017 - Cilium - Network and Application Security with BPF and XDPThomas Graf

Linux Native, HTTP Aware Network SecurityThomas Graf

BPF: Next Generation of Programmable DatapathThomas Graf

Cilium - Container Networking with BPF & XDPThomas Graf

Cilium - BPF & XDP for containersThomas Graf

Cilium - Fast IPv6 Container Networking with BPF and XDPThomas Graf

LinuxCon 2015 Stateful NAT with OVSThomas Graf

Taking Security Groups to Ludicrous Speed with OVS (OpenStack Summit 2015)Thomas Graf

2015 FOSDEM - OVS Stateful ServicesThomas Graf

The Next Generation Firewall for Red Hat Enterprise Linux 7 RCThomas Graf

SDN & NFV Introduction - Open Source Data Center NetworkingThomas Graf

Recently uploaded (20)

European Accessibility Act & Integrated Accessibility TestingJulia Undeutsch

Emma Dawson will guide you through two important topics in this session. Firstly, she will prepare you for the European Accessibility Act (EAA), which comes into effect on 28 June 2025, and show you how development teams can prepare for it. In the second part of the webinar, Emma Dawson will explore with you various integrated testing methods and tools that will help you improve accessibility during the development cycle, such as Linters, Storybook, Playwright, just to name a few. Focus: European Accessibility Act, Integrated Testing tools and methods (e.g. Linters, Storybook, Playwright) Target audience: Everyone, Developers, Testers

GDG Cloud Southlake #43: Tommy Todd: The Quantum Apocalypse: A Looming Threat...James Anderson

The Quantum Apocalypse: A Looming Threat & The Need for Post-Quantum Encryption We explore the imminent risks posed by quantum computing to modern encryption standards and the urgent need for post-quantum cryptography (PQC). Bio: With 30 years in cybersecurity, including as a CISO, Tommy is a strategic leader driving security transformation, risk management, and program maturity. He has led high-performing teams, shaped industry policies, and advised organizations on complex cyber, compliance, and data protection challenges.

Let’s Get Slack Certified! 🚀- Slack CommunitySanjeetMishra29

Gihbli AI and Geo sitution |use/misuse of Ai Technologyzainkhurram1111

The case for on-premises AIPrincipled Technologies

Exploring the advantages of on-premises Dell PowerEdge servers with AMD EPYC processors vs. the cloud for small to medium businesses’ AI workloads AI initiatives can bring tremendous value to your business, but you need to support your new AI workloads effectively. That means choosing the best possible infrastructure for your needs—and many companies are finding that the cloud isn’t right for them. According to a recent Rackspace survey of IT executives, 69 percent of companies have moved some of their applications on-premises from the cloud, with half of those citing security and compliance as the reason and 44 percent citing cost. On-premises solutions provide a number of advantages. With full control over your security infrastructure, you can be certain that all compliance requirements remain firmly in the hands of your IT team. Opting for on-premises also gives you the ability to design your infrastructure to the precise needs of that team and your new AI workloads. Depending on the workload, you may also see performance benefits, along with more predictable costs. As you start to build your next AI initiative, consider an on-premises solution utilizing AMD EPYC processor-powered Dell PowerEdge servers.

Securiport - A Border Security CompanySecuriport

Agentic AI - The New Era of IntelligenceMuzammil Shah

This presentation is specifically designed to introduce final-year university students to the foundational principles of Agentic Artificial Intelligence (AI). It aims to provide a clear understanding of how Agentic AI systems function, their key components, and the underlying technologies that empower them. By exploring real-world applications and emerging trends, the session will equip students with essential knowledge to engage with this rapidly evolving area of AI, preparing them for further study or professional work in the field.

Cyber Security Legal Framework in Nepal.pptxGhimire B.R.

Cyber security cyber security cyber security cyber security cyber security cy...pranavbodhak

End-to-end Assurance for SD-WAN & SASE with ThousandEyesThousandEyes

AI Emotional Actors: “When Machines Learn to Feel and Perform"AkashKumar809858

Supercharge Your AI Development with Local LLMsFrancesco Corti

In today's AI development landscape, developers face significant challenges when building applications that leverage powerful large language models (LLMs) through SaaS platforms like ChatGPT, Gemini, and others. While these services offer impressive capabilities, they come with substantial costs that can quickly escalate especially during the development lifecycle. Additionally, the inherent latency of web-based APIs creates frustrating bottlenecks during the critical testing and iteration phases of development, slowing down innovation and frustrating developers. This talk will introduce the transformative approach of integrating local LLMs directly into their development environments. By bringing these models closer to where the code lives, developers can dramatically accelerate development lifecycles while maintaining complete control over model selection and configuration. This methodology effectively reduces costs to zero by eliminating dependency on pay-per-use SaaS services, while opening new possibilities for comprehensive integration testing, rapid prototyping, and specialized use cases.

Evaluation Challenges in Using Generative AI for Science & Technical ContentPaul Groth

Evaluation Challenges in Using Generative AI for Science & Technical Content. Foundation Models show impressive results in a wide-range of tasks on scientific and legal content from information extraction to question answering and even literature synthesis. However, standard evaluation approaches (e.g. comparing to ground truth) often don't seem to work. Qualitatively the results look great but quantitive scores do not align with these observations. In this talk, I discuss the challenges we've face in our lab in evaluation. I then outline potential routes forward.

Co-Constructing Explanations for AI Systems using ProvenancePaul Groth

Explanation is not a one off - it's a process where people and systems work together to gain understanding. This idea of co-constructing explanations or explanation by exploration is powerful way to frame the problem of explanation. In this talk, I discuss our first experiments with this approach for explaining complex AI systems by using provenance. Importantly, I discuss the difficulty of evaluation and discuss some of our first approaches to evaluating these systems at scale. Finally, I touch on the importance of explanation to the comprehensive evaluation of AI systems.

LSNIF: Locally-Subdivided Neural Intersection FunctionTakahiro Harada

Neural representations have shown the potential to accelerate ray casting in a conventional ray-tracing-based rendering pipeline. We introduce a novel approach called Locally-Subdivided Neural Intersection Function (LSNIF) that replaces bottom-level BVHs used as traditional geometric representations with a neural network. Our method introduces a sparse hash grid encoding scheme incorporating geometry voxelization, a scene-agnostic training data collection, and a tailored loss function. It enables the network to output not only visibility but also hit-point information and material indices. LSNIF can be trained offline for a single object, allowing us to use LSNIF as a replacement for its corresponding BVH. With these designs, the network can handle hit-point queries from any arbitrary viewpoint, supporting all types of rays in the rendering pipeline. We demonstrate that LSNIF can render a variety of scenes, including real-world scenes designed for other path tracers, while achieving a memory footprint reduction of up to 106.2x compared to a compressed BVH. https://arxiv.org/abs/2504.21627

AI Trends - Mary MeekerRazin Mustafiz

Palo Alto Networks Cybersecurity FoundationVICTOR MAESTRE RAMIREZ

Grannie’s Journey to Using Healthcare AI ExperiencesLauren Parr

Agentic AI Explained: The Next Frontier of Autonomous Intelligence & Generati...Aaryan Kansari

Agentic AI Explained: The Next Frontier of Autonomous Intelligence & Generative AI Discover Agentic AI, the revolutionary step beyond reactive generative AI. Learn how these autonomous systems can reason, plan, execute, and adapt to achieve human-defined goals, acting as digital co-workers. Explore its promise, key frameworks like LangChain and AutoGen, and the challenges in designing reliable and safe AI agents for future workflows. Sticky Note Bullets: Definition: Next stage beyond ChatGPT-like systems, offering true autonomy. Core Function: Can "reason, plan, execute and adapt" independently. Distinction: Proactive (sets own actions for goals) vs. Reactive (responds to prompts). Promise: Acts as "digital co-workers," handling grunt work like research, drafting, bug fixing. Industry Outlook: Seen as a game-changer; Deloitte predicts 50% of companies using GenAI will have agentic AI pilots by 2027. Key Frameworks: LangChain, Microsoft's AutoGen, LangGraph, CrewAI. Development Focus: Learning to think in workflows and goals, not just model outputs. Challenges: Ensuring reliability, safety; agents can still hallucinate or go astray. Best Practices: Start small, iterate, add memory, keep humans in the loop for final decisions. Use Cases: Limited only by imagination (e.g., drafting business plans, complex simulations).

Cognitive Chasms - A Typology of GenAI Failure Failure ModesDr. Tathagat Varma

European Accessibility Act & Integrated Accessibility TestingJulia Undeutsch

GDG Cloud Southlake #43: Tommy Todd: The Quantum Apocalypse: A Looming Threat...James Anderson

Let’s Get Slack Certified! 🚀- Slack CommunitySanjeetMishra29

Gihbli AI and Geo sitution |use/misuse of Ai Technologyzainkhurram1111

The case for on-premises AIPrincipled Technologies

Securiport - A Border Security CompanySecuriport

Agentic AI - The New Era of IntelligenceMuzammil Shah

Cyber Security Legal Framework in Nepal.pptxGhimire B.R.

Cyber security cyber security cyber security cyber security cyber security cy...pranavbodhak

End-to-end Assurance for SD-WAN & SASE with ThousandEyesThousandEyes

AI Emotional Actors: “When Machines Learn to Feel and Perform"AkashKumar809858

Supercharge Your AI Development with Local LLMsFrancesco Corti

Evaluation Challenges in Using Generative AI for Science & Technical ContentPaul Groth

Co-Constructing Explanations for AI Systems using ProvenancePaul Groth

LSNIF: Locally-Subdivided Neural Intersection FunctionTakahiro Harada

AI Trends - Mary MeekerRazin Mustafiz

Palo Alto Networks Cybersecurity FoundationVICTOR MAESTRE RAMIREZ

Grannie’s Journey to Using Healthcare AI ExperiencesLauren Parr

Agentic AI Explained: The Next Frontier of Autonomous Intelligence & Generati...Aaryan Kansari

Cognitive Chasms - A Typology of GenAI Failure Failure ModesDr. Tathagat Varma

LinuxCon 2015 Linux Kernel Networking Walkthrough

1. Kernel Networking Walkthrough LinuxCon 2015, Seattle Thomas Graf Kernel & Open vSwitch Team Noiro Networks (Cisco)

2. Agenda ● Getting packets from/to the NIC ● NAPI, Busy Polling, RSS, RPS, XPS, GRO, TSO ● Packet processing ● RX Handler, IP Processing, TCP Processing, TCP Fast Open ● Queuing from/to userspace ● Socket Buffers, Flow Control, TCP Small Queues ● Q&A

3. Touring the Network Stack Expectation Reality

4. How does a packet get in and out of the Network Stack?

5. Receive & Transmit Process Ring Buffer DMA Parse L2 & IP Parse TCP/UDP Socket Buffer Task / Container read() Ring Buffer Construct IP Construct TCP/UDP Local? Socket Buffer Forward Route? write() NIC Network Stack (Kernel Space) Process (User Space)

6. The 3 ways into the Network Stack Ring Buffer Network Stack Interrupt Driven A Ring Buffer Network Stack NAPI based Polling poll() B Ring Buffer Network Stack Busy Polling busy_poll() Task C

7. RSS – Receive Side Scaling ● NIC distributes packets across multiple RX queues allowing for parallel processing. ● Separate IRQ per RX queue, thus selects CPU to run hardware interrupt handler on. RX-queue-1 RX-queue-2 RX-queue-3 RX-queue-4 CPU 1 CPU 2 CPU 1 CPU 2 filter

8. RPS – Receive Packet Steering ● Software filter to select CPU # for processing ● Use it to ... RX-queue-1 RX-queue-2 RX-queue-3 RX-queue-4 CPU 1 CPU 2 CPU 3 CPU 1 CPU 2 CPU 3 ... redo queue - CPU mapping ... distribute single queue to multiple CPUs

9. Hardware Offload ● RX/TX Checksumming ● Perform CPU intensive checksumming in hardware. ● Virtual LAN filtering and tag stripping ● Strip 802.1Q header and store VLAN ID in network packet meta data. ● Filter out unsubscribed VLANs. ● Segmentation Offload

10. Generic Receive Offload (ethtool -K eth0 gro on) Ring Buffer Network Stack poll() NAPI based GRO MTU GRO Up to 64K It's more effective to process 1x64K bytes packet instead of 40x1500 bytes packets.

11. Segmentation Offload (ethtool -K eth0 tso on) (ethtool -K eth0 gso on) Ring Buffer Network Stack Generic Segmentation Offload (GSO) ethtool -K eth0 gso on MTU TCP Segmentation Offload (TSO) ethtool -K eth0 tso on MTU Up to 64K

12. How does a packet get through the Network Stack? (c) Karen Sagovac

13. Packet Processing Link Layer Ingress QoS Proto Handler IPv4 IPv6 ARP IPX ... Drop The Feast! RX Handler Open vSwitch Team Bonding Bridge macvlan macvtap Packet Socket ETH_P_ALL tcpdump

14. IP Processing IP Handler Route Lookup PREROUTING IPv4 Construction Route Lookup Local Output OUTPUT POSTROUTINGLink Layer FORWARD Forwarding L4 (TCP, ...) Local Delivery INPUT User Space

15. TCP Processing IP Socket Filter Receive TCP Parse TCP Lookup Socket Backlog socket locked Receive Socket Buffer Prequeue task exists process context ← softirq Task poll()read()

16. TCP Fast Open (net.ipv4.tcp_fastopen) 2nd Req SYN SYN+ACK ACK+HTTP GET Data 2x RTT SYN+Cookie+HTTP GET SYN+ACK+Data 2nd Req 1x RTT Client Server SYN SYN+ACK ACK+HTTP GET 1st Req Data 2x RTT2x RTT Regular Client Server SYN SYN+ACK+Cookie ACK+HTTP GET 1st Req Data 2x RTT Fast Open

17. Memory Accounting & Flow Control

18. Socket Buffers & Flow Control (net.ipv4.tcp_{r|w}mem) ssh TX Ring Buffer TCP/IP Socket Buffer wmem overlimit? Block or EWOULDBLOCK wmem += packet-size ssh RX Ring Buffer TCP/IP Socket Buffer rmem -= packet-size rmem overlimit? Reduce TCP Window rmem += packet-size wmem -= packet-size write()

19. TCP Small Queues (net.ipv4.tcp_limit_output_bytes) ssh TX Ring Buffer Driver TCP/IP Socket Buffer write() Queuing Discipline torrent Socket Buffer write() TSQ: max 128Kb in flight per socket

20. Q&A Contact: ● E-Mail: [email protected] ● Twitter: @tgraf__

LinuxCon 2015 Linux Kernel Networking Walkthrough

Recommended

More Related Content

What's hot (20)

Similar to LinuxCon 2015 Linux Kernel Networking Walkthrough (20)

More from Thomas Graf (16)

Recently uploaded (20)

LinuxCon 2015 Linux Kernel Networking Walkthrough