High-Performance Cloud Networking With Calico and Vec...
summary
Calico with a VPP dataplane plus Marvell’s Octeon native plugin offloads IPsec crypto to a SmartNIC and reduces CPU while raising throughput: Calico VPP with Octeon native plugin shows memif VPP reaching 43.5 Gbps on Octeon vs 23.9 Gbps on x86, ebpf at 32.1 vs 25.8 Gbps, and iptables at 27 vs 19.9 Gbps. ARM crypto numbers hit 8.77 Gbps vs 5.9 on x86, and inline crypto offload projects predict 30–35 Gbps; code and patches are slated for upstream.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:05Traditional networking limits
- 2:32VPP data plane overview
- 3:57Calico data plane options
- 8:11Data plane trade-offs
- 11:23VPP architecture overview
- 15:15Octeon with VPP and Calico
- 19:12VPP and Octeon benchmarks
- 23:57Benchmark setup and results
- 27:13Q&A
related talks
44mUnderstanding Calico's eBPF data-plane
01h 00mCommSec D1 - An Isolated Data Center Security Policy Model Using SmartNICs
32mUsing Open-Source Software to Secure Cloud-Native Applications
23mContainer and Kubernetes security policy design: 10 critical best practices
52mImplementing holistic security for containers and Kubernetes
35mFull Mesh Encryption in Kubernetes with WireGuard and Calico
46mZero Trust Cloud VPN Based on VPP and WireGuard
18mPower Savings & NFV: How to reconcile these 2 constraints ?