- people - netdevconf.info

0x16 talk: HomaLS: Tunneling messages through secure segments
by Jamal Hadi Salim 28 Sep '22

28 Sep '22

In this talk Tianyi Gao and Michio Honda introduce HomaLS, a transport-level encryption integrated with the Homa transport protocol[keynote]. Homa outperforms DCTP by a large margin. It seems natural to use TLS over Homa for secure communication; however, that approach introduces the same challenge as TLS over TCP, that is, to prevent the application from using transparent, opportunistic NIC offloading as is achieved by kTLS today. HomaLS instead allows applications to read or write plain-text data then it performs segment-level encryption taking advantage of Homa utilizing TSO by overlaying the TCP header including the TCP options space. In this talk Tianyi and Michio first present their initial protocol design and then go over their implementation. Since utilizing hardware offloading is crucial, they test whether hardware TLS offloading, which is far more complicated than TSO, works for a Homa segment, which has a different protocol number than TCP in the IPv4 header. They examined the Nvidia ConnectX-6 DX NIC, and found that it works with minor driver modifications, indicating the viability of the HomaLS offload approach. They will finally present experimental results. Their prototype implementation that encrypts data in software confirms that HomaLS exhibits shorter RTT than kTLS over TCP by 26–30%, achieving 18–23µs of message RTT. References --------- Keynote: https://netdevconf.info/0x16/session.html?keynote-ousterhout cheers, jamal

1 0

0x16 talk: Your Network Datapath Will Be P4 Scripted
by Jamal Hadi Salim 28 Sep '22

28 Sep '22

P4 has gained industry-wide acceptance as a datapath language. Infact big customers who are consumers of xPUs, example MS[7], are requesting that NIC vendors to allow prescription of required datapaths using P4[1]. IOW, P4 is now a big deal. Running P4 on top of TC has been a subject of many many discussions in the community over the last few years, initially in informal physical and electronic hallways and eventually in physical formal meetings, see [1],[2],[3],[4],[5],[6]. Finally, some action. In this talk J. Hadi Salim et al will discuss the overall design and architecture of P4TC with a focus on scriptable software and hardware offloaded dataplanes via TC. "Scriptability" as a concept has precedence in the kernel TC architecture in the u32 classifier, the pedit action, etc. P4TC builds on that knowledge and allows templating of a specific datapath. A P4 program when compiled generates tc scripts, which when executed, manifests into the functionally equivalent P4 program in the kernel as is in hardware. In the simple cases a P4 compiler is not needed since the TC scripts can be handcoded. "Scriptability" means ability to manifest _any_ P4 program regardless of functionality into the kernel without compiling any kernel code or loading any binary blobs into the kernel. P4TC takes advantage of the modularity of the TC architecture and makes very minimal changes to the TC core code while providing all the necessary objects to sufficiently abstract a P4 program. The first version of the code is expected to be released at the conference during this talk. References: ---------------- [1] Matty Kadosh, "P4 Offload", TC Workshop, Netdev conference 2.2, 2017 https://legacy.netdevconf.info/2.2/slides/salim-tc-workshop04.pdf [2] Prem Jonnalagadda, "Mapping tc to P4", TC Workshop, Netdev conference 2.2, 2017 https://legacy.netdevconf.info/2.2/slides/salim-tc-workshop06.pdf [3] Jamal Hadi Salim, "What P4 Can Learn From Linux Traffic Control", proceedings of ONF 5th P4 Workshop, 2018 https://opennetworking.org/wp-content/uploads/2020/12/Jamal_Salim.pdf [4] Many speakers, TC P4 workshop, Intel, Santa Clara, 2018 https://files.netdevconf.info/d/5aa8c0ca61ea4e96bb46/ [5] Antonin Bas and R. Krishnamoorthy. "Instrumenting P4 in the Kernel", TC Workshop, Netdev conference 0x12, 2018 https://www.files.netdevconf.info/d/9535fba900604dcd9c93/files/?p=/Instrume… [6] Marian Pritsak and Matty Kadosh, "P4 Compiler Backend for TC", Netdev conference 0x13, 2019 https://legacy.netdevconf.info/0x13/session.html?p4-compiler-backend-for-tc [7] MS Azure DASH https://github.com/Azure/DASH/tree/main/documentation

1 0

0x16 talk: NVMeTCP Offload – Implementation and Performance Gains
by Jamal Hadi Salim 27 Sep '22

27 Sep '22

Shai Malin and Aurelien Aptel build up on the work presented At netdev conf 0x15[1] to define the concept of ULP (upper layer protocol) DDP (direct data placement). The idea is to provide request-response ULP protocols, such as NVMe-TCP, the ability to place response data directly in pre-registered buffers according to protocol header tags. For NVMe-TCP, on the receive side two things happen: 1) The NIC places data directly onto the user space provided buffers totally eliminating data copy between kernel TCP socket layer and user space. 2) The NIC computes and validates CRCs - a compute intensive operation further saving host compute resources. On the transmit path the CRC calculation is offloaded. All this is done with very minimal changes to the core kernel TCP! In this talk, Shai and Aurelien will present the NVMeTCP DDP and CRC (data digest) offload design and the associated driver-HW interaction that makes it work. They will present the performance benefit of the offload in a variety of comparisons and under different conditions. They will also cover the challenges we had and how they were able to resolve them. [1]https://netdevconf.info/0x15/session.html?Autonomous-NVMe-TCP-offload cheers, jamal PS: Yes, early bird registration, which is ReelCheep, is still open. Visit https://netdevconf.info/0x16/registration.html

1 0

0x16, talk: State Of The Union In TCP Land
by Jamal Hadi Salim 26 Sep '22

26 Sep '22

Eric Dumazet, who doesnt do much talking (rumor is that is the way of network ninjas), will give us a state of the union of both user space and kernel realms of the TCP universe. cheers, jamal Another reminder that the early bird registration is still open and reelcheep https://netdevconf.info/0x16/registration.html

1 0

0x16, talk: Pushing OpenVPN down the stack: Data Channel Offload (DCO)
by Jamal Hadi Salim 26 Sep '22

26 Sep '22

OpenVPN is probably the most ubiquitous VPN software in the open source realm - multiplexing created SSL tunnels over TCP/UDP. Upto now both the control and the data planes were implemented in userspace - which has limited scaling capacity. In this talk Antonio Quartulli describes, what he calls the OpenVPN Data Channel Offload (ovpn-dco for brevity), the offloading of the OpenVPN datapath to the kernel. Antonio will discuss the netlink control plane interface, implementation and performance results. cheers, jamal PS: Reminder, early bird registration - reelcheep is still open https://netdevconf.info/0x16/registration.html

1 0

0x16: talk: High Performance Programmable Parsers
by Jamal Hadi Salim 26 Sep '22

26 Sep '22

Tom Herbert will delve into both the theory and implementation of programmable packet parsers that run with the highest performance in a given target environment. Tom will first describe protocol parsing as a Finite State Machine (FSM). Next he will dig into a declarative representation of a protocol parser alongside the FSM. In the final section he will apply these concepts to implementing high performance programmable parsers. A ubiquitous parser IR facilitates a variety of front end methods to program a parser (PANDA-C, PANDA-Python, P4, etc.), as well as a variety of back end targets (eBPF, DPDK, kParser, hardware offloads, etc.). He’ll look at an example parser called “big-parser” that is a superset of Linux flow-dissector functionality. Starting with the PANDA-C code for big-parser he will show its compilation into its json IR, and then show how the IR can be compiled into kParser and optimized eBPF targets for running in the kernel. Finally he will provide performance evaluation of “big-parser” running versus Linux kernel flow-dissector (both native kernel flow-dissector and one written in eBPF). More details at: https://netdevconf.info/0x16/session.html?High-Performance-Programmable-Par… cheers, jamal

1 0

0x16: Talk: Fixing TCP Slow Start for Slow Fat links
by Jamal Hadi Salim 25 Sep '22

25 Sep '22

When you have large link Bandwidth Delay Products such as in satellite links, TCP slow start and the default kernel socket and TCP config becomes an impedance to performance - often causing overshooting of available link bitrates resulting in significant packet loss; retransmitting over such links is quiet costly. TCP HyStart (on by default in the kernel), intended to avoid overshooting during slow start, unfortunately often exits from slow start prematurely which is especially detrimental to utilization on large BDP links. In this talk Maryam Ataei Kachooei et al propose adjustments to slow start that find a safe point to enter congestion avoidance (CA) without overshooting, while also avoiding premature exiting of the CA. They will discuss their socket tuning and their kernel modifications to achieve the stated goals. And finally they will discuss their evaluation and results of their proposed slow start algorithm over: 1) a commercial geostationary satellite link, 2) a low orbit satellite link and 3) a wired link. cheers, jamal PS: About one week before ReelCheep early bird registration ends.

1 0

0x16: First talk: When regular expressions meet XDP
by Jamal Hadi Salim 25 Sep '22

25 Sep '22

DDos attacks are easy to fend off when you know the protocol semantics: you can parse content, build filters, track flows and detect and block malicious attacks. But the bad guys are adapting as well not only in the traffic and content patterns but also in the volume of traffic. As an example the average attack volumes in 2021 on the G-Core Labs would peak at 300Gbps but in 2022 it is up in the 700Gbps range ;-> Ivan Koveshnikov and Sergey Nizovtsev describe the tooling at G-Core Labs to fend around DDoS and how they are adapting to increased volumes of attack by building a distributed defense. To deal with bad guys shifting pulse and protocol approaches they feel that it is necessary to use regular expressions to deliver coarse packet filtering peeking into the payload content. And in this talk they will share with the community how they implemented regular expressions on top of XDP. They evaluate the performance characteristics and discuss challenges involved in getting regular expressions working with XDP. https://netdevconf.info/0x16/session.html?When-regular-expressions-meet-XDP cheers, jamal PS: Registration is now open. Reel cheep until October 2.

1 0

0x16: Keynote Speaker, John Ousterhout
by Jamal Hadi Salim 24 Sep '22

24 Sep '22

We are honored to announce our Netdev 0x16 keynote speaker, industry and academic luminary: John Ousterhout John is the Bosack Lerner Professor of Computer Science at Stanford University with research focuses on new software stack layers to allow datacenter applications to take advantage of communication and storage technologies with microsecond-scale latencies. Amongst his many accomplishments are a few things to note: He is author of the book "A Philosophy of Software Design"[1], co-creator of the Raft consensus protocol[2], and creator of the Tcl scripting language and the Tk toolkit[3]! John says TCP is just plain wrong for modern datacenter technologies. While he acknowledges TCP's perseverance, having survived 40 years of dramatic technology changes, he thinks it's time for us to move on to a new approach that will make headway against what he calls the "datacenter tax". John will enumerate the problems that makes TCP unfit and then will describe his Homa transport protocol approach which tackles the issues with TCP alongside an evolutionary path to retiring TCP altogether. John is one of the rare professors who code ;-> Potential grad students, are you seeing this?. In this keynote he will discuss his experience in implementing Homa in the kernel. Oh, one last thing: He argues that it doesnt make any more sense to implement transport protocols in software - and firmly believes they should be moved to hardware. He feels we need to start rethinking the NIC architecture. Come hear his words of wisdom on this topic. You cant possibly miss this keynote talk, folks! Come one, come all. More details here: https://netdevconf.info/0x16/session.html?keynote-ousterhout cheers, jamal [1]https://www.amazon.com/dp/1732102201 [2]https://raft.github.io/ [3]https://www.tcl.tk/

1 0

0x16: Registration is now open!
by Jamal Hadi Salim 22 Sep '22

22 Sep '22

Registration for 0x16 is now open and Reel cheep! Note: 0x16 is a hybrid event. Early Bird Rate September 21st - October 2nd ---------------------------------------------------------- Physical attendance - $150 USD Physical attendance (student) - $40 USD Virtual attendance - $50 USD Virtual attendance (student) - $20 USD After October 2nd: Normal Rate ---------------------------------------- Physical attendance - $300 USD Physical attendance (student) - $100 USD Virtual attendance - $100 USD Virtual attendance (student) - $40 USD More details here: https://netdevconf.info/0x16/registration.html cheers, jamal

1 0

0x16: Yet More Workshops and Tutorials!
by Jamal Hadi Salim 20 Sep '22

20 Sep '22

1) Workshop: The Segment Routing over IPv6 (SRv6) Network Programming framework enables a network operator or an application to specify a packet processing program by encoding a sequence of instructions in the IPv6 packet header. The SRv6 Network Programming framework is standardized in IETF RFC8986. In this workshop Stefano Salsano, Reshma Sudarshan and Daniel Bernier will give a community update to the on SRv6 support in the Linux Kernel. They will review the supported SRv6 features, and associated iproute2 extension, starting from kernel 4.10 onwards. They will also provide an update on some new SRv6 features that they plan to contribute to the Linux Kernel. In addition, they will review supported SRv6 features in FRR along with some interesting SRv6 control plane features that they plan to submit to FRR. More Info: https://netdevconf.info/0x16/session.html?SRv6-Network-Programming-in-Linux… 2) Tutorial: The P4 language is gaining very strong industry adoption for packet forwarding aiming to become the standard language for programming the network data plane end-to-end. In this tutorial Salvatore Signorello and Fernando Ramos will introduce you to P4 programming with available open-source software. The tutorial will feature a hands-on component where the participants will learn how to program custom packet processing logic into the Linux kernel through several open-source P4 technologies. https://netdevconf.info/0x16/session.html?Learn-how-to-program-the-Linux-ke… 3) Workshop Jamal Hadi Salim will chair the Traffic Control workshop. Face to Face discussions on different TC topics will take place. Current WAG agenda (subject to update): - New features requests/improvements - Performance - Testing Progress 4) Workshop Alexander Lobakin, Maciej Fijalkowski and Larysa Zaremba Will chair an XDP workshop. Agenda to be updated. cheers, jamal

1 0

0x16: More workshops and tutorials!
by Jamal Hadi Salim 20 Sep '22

20 Sep '22

Three more announcements: 1) Workshop: P4 has gained industry-wide acceptance as the offload datapath language of choice and the number of (large) NIC consumers that are now mandating P4 as the way to describe offload datapath they desire is growing. After many years of discussions at netdevconf of getting P4 over TC, it is finally here! P4TC is a kernel-native offloadable and scriptable P4 infrastructure. Anjali Singhai Jain will chair the P4TC workshop with discussions on the current kernel effort to get P4 over TC. The first code release will happen at the conference. Current WAG agenda: 1) Code Release and high level overview 2) P4C compiler Interaction 3) Control-user introspection 4) The CI/CD and automated test infrastructure in use 5) Driver interfaces discussion 6) more topics to be added later. Send requests to Anjali. https://netdevconf.info/0x16/session.html?P4TC-Workshop 2) Tutorial: You may have heard of Landlock as a mechanism for providing unprivileged access control. But do you know how Landlock plays in the networking world? Mickaël Salaün, the Landlock maintainer, will guide you through this hands-on tutorial on how to get there. The Landlock mechanism goes beyond network access-control via firewalls or classical applicatiopn restraining via SeLinux or Appamor. Come learn from Mickaël how to patch network apps to use this exciting feature. https://netdevconf.info/0x16/session.html?How-to-sandbox-a-network-applicat… 3) Workshop Johannes Berg and Kalle Valo will chair the wireless workshop. The current topics include Wi-Fi 7 support and replacement for module parameters. cheers, jamal

1 0

0x16: FRR workshop and RDMA tutorial
by Jamal Hadi Salim 20 Sep '22

20 Sep '22

1) Workshop: Donald Sharp will chair the FRR workshop. A current WAG agenda includes discussions on: - the ongoing work in Segment Routing for both OSPF and ISIS, - RFC compliance in BGP, - continued work on Nexthop Groups - further ongoing dataplane integration work - and review of recent releases and what would people like to see from FRR itself in the future. 2) Tutorial If you are a developer who has been curious about RDMA or simply interested in implementing high-performance communication for applications then dont miss this session. Gurus Roland Dreier and Jason Gunthorpe will walk you through the innards to get you there. More details at: https://netdevconf.info/0x16/session.html?RDMA-programming-tutorial cheers, jamal

1 0

Registration
by Jamal Hadi Salim 19 Sep '22

19 Sep '22

Folks, We are working on getting registration open this week. We will send more details later this week. cheers, jamal

1 0

0x16: first tutorial! Introduction to time synchronization
by Jamal Hadi Salim 19 Sep '22

19 Sep '22

Maciek Machnikowski gave us the PTP theoretical details in: https://netdevconf.info/0x15/session.html?Introduction-to-time-synchronizat… Now he says let's get more practical in this new tutorial! This tutorial introduces the practical side of time synchronization in Linux. It goes over the tools in the linuxptp, chrony, and other helpful software that makes the deployment of time synchronization easy and convenient. Come and learn more about PTP. For More details: https://netdevconf.info/0x16/session.html?Introduction-to-time-synchronizat… cheers, jamal

1 0

ox16: First Workshop, Mini Netfilter workshop
by Jamal Hadi Salim 18 Sep '22

18 Sep '22

Pablo Neira Ayuso will chair the mini netfilter workshop that will cover updates in Netfilter land since 0x15. cheers, jamal

1 0

0x16: Bronze Sponsor, OpenVPN(R)
by Jamal Hadi Salim 15 Sep '22

15 Sep '22

We welcome OpenVPN® Inc. as a bronze sponsor for Netdev conf 0x16! OpenVPN® Inc., a longtime supporter of the open source community, offers two secure networking solutions for small, medium, and enterprise businesses with unmatched flexibility, scalability, and ease of use. OpenVPN Cloud provides secure communication between an organization’s distributed workforce, IoT/IIoT devices, and the online services they rely on daily, with a secure virtualized network offered as a service. OpenVPN Access Server, our self-hosted solution, simplifies the rapid deployment of a secure remote access solution with a web-based graphic user interface and built-in OpenVPN Connect Client installer. With over 60 million downloads of our core open source software and over 20,000 commercial customers, OpenVPN is recognized as a global leader in secure networking. cheers, jamal

1 0

0x16: Bronze sponsor, Jump!
by Jamal Hadi Salim 10 Sep '22

10 Sep '22

We are pleased to welcome _back_ Jump Trading Group as a bronze sponsor for Netdev conf 0x16! Jump Trading Group(https://www.jumptrading.com/) is a research-based electronic trading firm with 1,300+ employees and over a dozen offices across the globe. Founded in the trading pits of Chicago in 1999, Jump's continued success is driven by partnering sophisticated quantitative research with bleeding-edge technology to trade the global markets. Jump's culture is unique. Constant innovation requires fearlessness, creativity, intellectual honesty, and a relentless competitive streak. They research, design, develop, and deploy technologies that constantly change their world, fund startup-ups across industries, and partner with global research organizations and universities to continue solving problems. cheers, jamal

1 0

0x16: Bronze sponsor, NVIDIA
by Jamal Hadi Salim 09 Sep '22

09 Sep '22

We are pleased to welcome back NVIDIA (https://www.nvidia.com/) as a bronze sponsor for Netdev conf 0x16! Thank you for your sponsorship! NVIDIA is the leader in open networking with end-to-end solutions for SmartNICs, DPUs, open optics, and accelerated data center switches. NVIDIA is committed to open-source at all layers of the software and hardware stack with open networking initiatives like Linux Networking, SwitchDev, DENT, and the SONiC network operating systems and believes that open-source has the power to accelerate innovation and benefits everyone. cheers, jamal

1 0

0x16: New Bronze sponsor! HAProxy
by Jamal Hadi Salim 09 Sep '22

09 Sep '22

We are pleased to announce a Bronze sponsorship from our friends at HAProxy. Thank you for your kindness! HAProxy Technologies is the company behind HAProxy, the world’s fastest and most widely used software load balancer. Rapidly deploy HAProxy products to deliver websites and applications with the utmost performance, observability, and security at any scale and in any environment. cheers, jamal

1 0

Recommended Hotels
by Jamal Hadi Salim 08 Sep '22

08 Sep '22

Apologies, this information should have gone up on the website a long time ago. We will be putting it there, for now here it is. As a reminder (also to go on the website RSN) the location is at the: Centro de Congressos do Instituto Superior Técnico, located at Av. Rovisco Pais 1, 1049-001 Lisboa, Portugal Hotel list: TURIM Alameda Hotel https://turim-hotels.com 4 star hotel Av. Rovisco Pais 34, 1000-268 Lisboa, Portugal 300 m from conference Holiday Inn Lisbon, an IHG Hotel https://g.page/holiday-inn-lisbon?share 4 star hotel Av. de António José de Almeida 28-A, 1000-044 Lisboa 400 m from conference Hotel Canadá http://www.hotelcanada.pt/en/ 2 star hotel Av. Defensores de Chaves 35, 1000-111 Lisboa, Portugal 450 m from conference A. S. HOTEL https://www.hotel-aslisboa.pt 3 star hotel Av. Alm. Reis 188, 1000-055 Lisboa, Portugal 500 m from conference Jupiter Lisboa Hotel https://www.jupiterlisboahotel.com/en/ 4 star hotel Av. da República 46, 1050-195 Lisboa, Portugal 850 m from conference Exe Saldanha https://www.eurostarshotels.com 3 star hotel Av. Defensores de Chaves 5, 1000-109 Lisboa, Portugal 750 m from hotel cheers, jamal

1 0

0x16: Bronze Sponsor, Gcore!
by Jamal Hadi Salim 30 Aug '22

30 Aug '22

Hi folks, We are pleased to welcome Gcore as bronze sponsors for Netdev 0x16. Thank you for your support Gcore! Gcore is an international leader in public cloud and edge computing, content delivery, hosting and security solutions. Headquartered in Luxembourg with offices in Germany, Poland, Lithuania and Cyprus, Gcore provides infrastructure to global leaders in their industries. Gcore manages its own global IT infrastructure across 6 continents with 150+ points of presence in tier III data centers and a total capacity exceeding 110 Tbps. Gcore maintains one of the best network performances in Europe, North America, Asia & LATAM with average worldwide response times in the range of 3-30 ms. For more information: https://gcorelabs.com/ cheers, jamal

1 0

0x16: Bronze Sponsor, ByteDance!
by Jamal Hadi Salim 27 Aug '22

27 Aug '22

We are pleased to welcome ByteDance as bronze sponsors for for Netdev 0x16. Thank you for your support! Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content. See: https://www.bytedance.com/ cheers, jamal

1 0

0x16: Gold Sponsor, Meta!
by Jamal Hadi Salim 17 Aug '22

17 Aug '22

Hi folks, We are pleased to welcome back Meta as a Gold sponsor for Netdev 0x16. Thank you for your support! Meta believes open source accelerates the pace of innovation in the world. By sharing their code, their stack, and even their hardware designs, they are moving the industry forward while giving other companies and individuals a chance to use meta's platform to scale more quickly and build great products. Visit: https://engineering.fb.com/ cheers, jamal

1 0

0x16: Bronze Sponsor! Secunet
by Jamal Hadi Salim 11 Aug '22

11 Aug '22

We are pleased to welcome back secunet as a bronze sponsor for Netdevconf 0x16! secunet is a long time supporter and friend of the conference. We are grateful for their continued support. So who is Secunet? secunet(https://www.secunet.com/) is Germany’s leading cybersecurity company. In an increasingly connected world, the company’s combination of products and consulting assures resilient digital infrastructures and the utmost protection for data, applications and digital identities. secunet specialises in areas with unique security requirements – such as cloud, IIoT, eGovernment and eHealth. With security solutions from secunet, companies can maintain the highest security standards in digitisation projects and advance their digital transformation. secunet is an IT security partner to the Federal Republic of Germany and a partner of the German Alliance for Cyber Security. cheers, jamal

1 0

2024

2023

2022

2021

2020

2019

2018

people