Root is less: container networks get in shape with pasta
summary
Pasta is a usermode networking backend that ships native Podman integration and a companion passt for VMs, implementing header strip/append in user space while preserving container IPs (including IPv6) and copying routes/addresses. The demo sustains about 6 Gbps using splice/zero‑copy and avoids heap allocations by using recv MSG_PEEK; wireguard is largely functional, Podman 4.4 and Builders support it, and the project already handles multiple IPv4/IPv6 addresses and NDP prefix advertising.
AI-written summary · about
chapters (7)
- 0:00Start
- 5:54Networking like nobody can do
- 9:36And why exactly would you do that?
- 12:07Isn't that an ugly workaround?
- 23:17Recent developments
- 24:25Non-local binds address without NAT
- 26:05Runtime port/address forwarding
related talks
26mContainer Networking: The Play of BPF and Network NS with different...
26mHack Your Own Network Connectivity
26mFrom veth Pairs to Services: The Secret Life of Container Packets
51mAccelerate containers and VMs networking with vDPA
33mCAP_NET_RAW And ARP Spoofing in Your Cluster: It's Going Downhill From Here
17mPod-to-Pod Ping: The Hidden Wiring of Kubernetes
50mThe case for zero-copy in containers: Accelerating...
33mContainer Networking for Micro-Services: An Apache Mesos Networking Deep Dive