LIVE Q&A #4
summary
Panel covers concrete designs and operational numbers: a host-side TSA intercepts connect calls, swaps file descriptors across namespaces using seccomp to avoid BPF re-capture, costing tens of milliseconds overhead once per connection; host-based entitlement remarks DSCP per packet with per-packet remarking negligible CPU cost; entitlement negotiation runs quarterly using simulations on thousands of machines for negotiation, and teams consider importance sampling or ML approximations; RDMA deployment raises isolation and security trade-offs for exposing hardware.
AI-written summary · about
chapters (6)
- 0:00Welcome
- 1:29Design choices and security
- 8:17Operational challenges
- 17:15Scalability challenges
- 23:10RDMA deployment plans
- 26:25Closing
