Conntrack offload: why and how

on YouTube ↗19m

" summary

Explains a concrete path to hardware-accelerated Conntrack by offloading the flow table (one per zone) to NICs, with control via the TC action CT; the pieces actually built are kernel support in kernel 5.7 and RHEL 8.3 tech preview with the Mellanox 5 driver as the only supported offloader so far. New connections still require software to create entries (offload is incompatible with skip-software), only established flows get flooded to hardware, and stats/aging remain managed by software.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 0:15What Is Contract
3. 0:52Flow Tables
4. 3:24Contract and Flow Tables

" related talks

• 21mAccelTCP: Accelerating Network Applications with Stateful TCP OffloadingKyoungSoo Park, YoungGyoun Moon, SeungEon Lee, Muhammad Asim Jamshed · NSDI 2020
• 21mRemote TCP Connection Offload and ApplicationsMichio Honda, Shuo Li, Steven Chien, Tianyi Gao · NSDI '26
• 17mRearchitecting the TCP Stack for I/O-Offloaded Content DeliveryYoungjin Kwon, Minlan Yu, KyoungSoo Park, Taehyun Kim, Deondre Martin Ng, Junzhi Gong · NSDI 2023
• 36mOffloading Network Traffic Classification to HardwareMaxime Chevallier · Open Source Summit Europe + Embedded Linux Conference Europe 2019
• 27mHigh speed load balancing from the Linux KernelLaura Garcia Liebana · HighLoad++ 2017
• 23mACK to the Future: TCP in 2025Philip Rowlands · SREcon25 Europe/Middle East/Africa
• 14mFlexTOE: Flexible TCP Offload with Fine-Grained ParallelismSimon Peter, Rajath Shashidhara, Timothy Stamler, Antoine Kaufmann · 19th USENIX Symposium on Networked Systems Design and Implementation (NSDI '22)
• 34mDeterministic Networking for Real-Time Systems (Using TSN)Henrik Austad · Open Source Summit Europe + Embedded Linux Conference Europe 2017