~/talk

Remote TCP Connection Offload and Applications

Talkat NSDI '26 · 2026-05-04..05-06· [networking, security]
name:Shuo Li
links:none on file
links:none on file
links:none on file
slides:none on file

XO enables direct server return by serializing TLS/TCP connection state and restoring it on backends, cutting L7 proxy CPU and bandwidth. It installs per-connection redirect rules with an EBPF+TC hybrid redirection (works on ConnectX‑5 and Agilio) and uses a cancelable user-space TC queue to avoid stale hardware rules. Evaluation shows 27–365% higher throughput vs conventional L7LBs and up to 135% and 300% gains for Ceph and nginx respectively.

AI-written summary · about

  1. 0:00Remote TCP connection offload intro
  2. 2:26XO reduces CPU/network overhead
  3. 3:54Limitations of L7 load balancer optimizations
  4. 4:37XO architecture and connection migration
  5. 6:26eBPF and TC packet redirection
  6. 8:12Cancelable queue for hardware rules
  7. 10:02Porting apps to XO
  8. 11:51Kernel network stack advantages
  9. 12:11Performance vs conventional proxy
  10. 14:49CPU impact on LB and servers
  11. 15:30State transfer latency
  12. 16:40TCP state serialization optimization
  13. 17:27Throughput and CPU in EnginX/SAP
  14. 18:10Deploying XO in virtualized envs
  15. 19:16Future work on congestion control
  16. 19:39Summary and follow-up
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.