cc-pipe: Breaking Systemic Bottlenecks in RPKI Data Supply Chain with Concurrent and...

on YouTube ↗18m

" summary

cc-pipe replaces the RP monolithic validation barrier with a concurrent pipeline that generates local view updates per resource certificate, uses a predictive conflict graph and reference counting to ensure strong consistency, and groups conflicting updates for simultaneous distribution. Implemented as a reusable library and integrated into Routinator and Fort, it cuts average validation latency by up to 73.3% in a month-long live deployment, saves hours under projected future loads, tolerates dozens of slow publication points, and adds only modest RP memory/CPU overhead.

AI-written summary · about

" chapters (10)

1. 0:00RPKI introduction and challenges
2. 3:24Bottlenecks in RPKI data supply
3. 5:35Consistency vs pipelining dilemma
4. 6:20cc-pipe three-step roadmap
5. 12:31Router overhead control in cc-pipe
6. 14:59Implementation and evaluation
7. 15:22Real-world deployment results
8. 16:44Scalability results
9. 17:28Robustness against slow publishers
10. 18:10Conclusion and Q&A

" related talks

• 21mR2P2: Making RPCs first-class datacenter citizensAdrien Ghosn, Marios Kogias, Edouard Bugnion, George Prekas, Jonas Fietz · USENIX ATC '19
• 14mEmpower Programmable Pipeline for Advanced Stateful Packet ProcessingYong Feng, Bin Liu, Yang Xu, Zhikang Chen, Haoyu Song, Chuwen Zhang, Yinchao Zhang, Hanyi Zhou, Ruoyu Sun, Wenkuo Dong, Peng Lu, Shuxin Liu · 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24)
• 15mFrom Address Blocks to Authorized Prefixes: Redesigning RPKI ROV with a Hierarchical...Gaogang Xie, Yanbiao Li, Hui Zou, Zedong Ni, Yinbo Xu, Guang Cheng · NSDI '25
• 05mJump-starting back-office connectionsHarkeerat Bedi · Velocity 2016 Santa Clara
• 33mAdvanced rp_ filterGuillaume Nault · DevConf.CZ 2023
• 14mA large-scale deployment of DCTCPBalasubramanian Madhavan, Abhishek Dhamija, Prashanth Kannan, Neil Spring, Shrikrishna Khare, Hechao Li, Jie Meng, Madhavi Rao, Lawrence Brakmo, Srikanth Sundaresan, Soudeh Ghorbani · 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24)
• 54mPDCP Packet Processing Library in DPDK - LibpdcpAnoob Joseph, Akhil Goyal · DPDK Summit APAC 2024
• 15mIsolation Mechanisms for High-Speed Packet-Processing PipelinesAurojit Panda, Tao Wang, Anirudh Sivaraman, Gianni Antichi, Xiangrui Yang · 19th USENIX Symposium on Networked Systems Design and Implementation (NSDI '22)