Symerton--using virtualization to accelerate packet processing

Subscribe (Full Service)


	Search: The ACM Digital Library The Guide

	Feedback

Symerton--using virtualization to accelerate packet processing

Full text

Pdf (311 KB)

Source

Symposium On Architecture For Networking And Communications Systems archive
Proceedings of the 2006 ACM/IEEE symposium on Architecture for networking and communications systems table of contents

San Jose, California, USA

SESSION: Packet processing architectures table of contents

Pages: 133 - 142

Year of Publication: 2006

ISBN:1-59593-580-0

Authors

Aaron R. Kunze	Intel Corporate Technology Group, Hillsboro, OR
Stephen D. Goglin	Intel Corporate Technology Group, Hillsboro, OR
Erik J. Johnson	Intel Corporate Technology Group, Hillsboro, OR

Sponsors

ACM: Association for Computing Machinery
SIGARCH: ACM Special Interest Group on Computer Architecture
SIGCOMM: ACM Special Interest Group on Data Communication

Publisher

ACM New York, NY, USA

Bibliometrics

Downloads (6 Weeks): 5, Downloads (12 Months): 70, Citation Count: 0

Additional Information:

abstract references index terms collaborative colleagues

Tools and Actions:	Request Permissions Review this Article Save this Article to a Binder Display Formats: BibTeX EndNote ACM Ref

DOI Bookmark:	Use this link to bookmark this Article: http://doi.acm.org/10.1145/1185347.1185365 What is a DOI?

ABSTRACT

The complexity of packet-processing applications continues to grow, with encryption, compression, and XML processing becoming common on packet-processing devices at the edge of enterprise and service provider networks. While performance remains a key differentiator for these devices, the complexity and rate of change in the supported applications has made general-purpose platforms an attractive alternative to ASICs and network processors. General-purpose platforms offer excellent programmability and a wealth of existing software, in the form of operating systems, libraries, and applications that can be used to build a packet-processing system; however, the performance of general-purpose operating systems is unacceptable for many environments. This has driven developers to either make derivative versions of existing operating systems or to use special-purpose operating systems with a less comprehensive and familiar library of existing software.As part of the Symerton project, we propose using virtualization to address these issues. We have designed a system that has a virtual machine dedicated to high-performance networking, and a virtual machine dedicated to hosting non-performance critical tasks in a general-purpose operating system. Using a proof-of-concept implementation, we show that the resulting system outperforms a general-purpose operating system by an average of 22% for a real networking application. We also discuss tradeoffs that will need to be considered in further development of systems using this design.

REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

	1	D. Abramson, et al. Intel Virtualization Technology for Directed I/O. Intel Technology Journal. 10(3):179--191, August 2006.
	2	E. Abrossimov , M. Rozier , M. Shapiro, Generic virtual memory management for operating system kernels, Proceedings of the twelfth ACM symposium on Operating systems principles, p.123-136, November 1989
	3	S. Axelsson. Intrusion detection systems: A survey and taxonomy. Technical Report 99-15, Department of Computer Engineering, Chalmers University, March 2000.
	4	Paul Barham , Boris Dragovic , Keir Fraser , Steven Hand , Tim Harris , Alex Ho , Rolf Neugebauer , Ian Pratt , Andrew Warfield, Xen and the art of virtualization, Proceedings of the nineteenth ACM symposium on Operating systems principles, October 19-22, 2003, Bolton Landing, NY, USA
	5	H. Bryhni, E. Klovning, O. Kure. A comparison of load balancing techniques for scalable Web servers. IEEE Network. 14(4):58--64. Jul/Aug 2000.
	6	Constantinos Dovrolis , Brad Thayer , Parameswaran Ramanathan, HIP: hybrid interrupt-polling for the network interface, ACM SIGOPS Operating Systems Review, v.35 n.4, p.50-60, October 2001 [doi>10.1145/506084.506089]
	7	A. P. Foong , T. R. Huff , H. H. Hum , J. R. Patwardhan , G. J. Regnier, TCP performance re-visited, Proceedings of the 2003 IEEE International Symposium on Performance Analysis of Systems and Software, p.70-79, March 06-08, 2003
	8	Mohamed G. Gouda , Xiang-Yang Alex Liu, Firewall Design: Consistency, Completeness, and Compactness, Proceedings of the 24th International Conference on Distributed Computing Systems (ICDCS'04), p.320-327, March 24-26, 2004
	9	Jaluna. http://www.jaluna.com.
	10	National Laboratory for Applied Network Research (NLANR). http://nlanr.net.
	11	D. Neumann, et al. Intel Virtualization Technology in Embedded and Communications Infrastructure Applications. Intel Technology Journal. 10(3):217-226, August 2006.
	12	Eric Rescorla , Adam Cain , Brian Korver, SSLACC: A Clustered SSL Accelerator, Proceedings of the 11th USENIX Security Symposium, p.229-246, August 05-09, 2002
	13	Snort. http://www.snort.org/
	14	Design Considerations for Distributed Caching on the Internet, Proceedings of the 19th IEEE International Conference on Distributed Computing Systems, p.273, May 31-June 04, 1999
	15	Rich Uhlig , Gil Neiger , Dion Rodgers , Amy L. Santoni , Fernando C. M. Martins , Andrew V. Anderson , Steven M. Bennett , Alain Kagi , Felix H. Leung , Larry Smith, Intel Virtualization Technology, Computer, v.38 n.5, p.48-56, May 2005 [doi>10.1109/MC.2005.163]
	16	VMware. http://www.vmware.com.
	17	VxWorks. http://www.windriver.com Intel and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries.