Linux内核协议栈 NAT性能优化之FAST NAT

各位看官非常对不起，本文是用因为写的，如果多有不便敬请见谅

代码是在商业公司编写的，在商业产品中也不能开源，再次抱歉

This presentation will highlight our efforts on optimizing the

Linux TCP/IP stack for providing networking in an

OpenStack environment, as deployed at our industrial customers.

Our primary goal is to provide a high-quality and highly performant TCP/IP stack.

To achieve this, we have to identify the performance bottlenecks in

the Linux TCP/IP stack for networking in OpenStack. We have performed a lot of

Linux TCP/IP stack performance tuning, related to NIC, CPU cache hit rate, spin lock,

memory alloc and others. However, we learned while measuring that conntrack NAT

uses too much CPU such for instance for the ipt_do_table function.

Linux conntrack is very good, but it is too heavy and many functions are not used.

Instead, we implemented FAST NAT in the Linux TCP/IP stack.

We will present our efforts on reducing the performance costs.

First, FAST NAT uses spin lock instead of global connection table but the entry to greatly reduces the CPU waiting time,

and user policies is instead stored as a hash table not a list. The connection table and user

policy is per-NUMA, this would avoid CPU through QPI waste much time and increase delay.

Second, FAST NAT does not record the TCP status,

but only record a tuple with relevant connection formation for NAT forward.

This can reduce much check for forwarding packet.

Entry in the connection table can be set to expire on

an absolute expiration time or relative expiration time basis.

Relative expiration time will incresae by per forwarding packet.

Global connection table don't synchronize for reducing lock's using. This may casue one TCP stream in

per-NUMA connection table. If we use Intel Ixgbe NIC with Flow Director ATR mode, the incoming

stream and outcoming stream will have same index for multiple queues. The mentioned limit above

will disappear.

Limitations of FAST NAT only TCP and UDP are supported.

Although some limitations exist, our work has paid off and resulted in 15-20 percentage pps improvement.

转载于:https://www.cnblogs.com/scottieyuyang/p/5816168.html

Linux内核协议栈 NAT性能优化之FAST NAT相关推荐

linux pppoe优化性能,基于Linux内核模式的PPPoE优化与实现.pdf
基于Linux内核模式的PPPoE优化与实现.pdf 第18卷第7期电子设计工程 2010年7月 V01．18 No．7 Electronic Jul．2010 DesignEngineering ...
linux内核协议栈 TCP数据发送之发送窗口
目录 1 发送窗口概述 2 snd_una 和 snd_wnd 的更新 2.1 发送窗口初始化 2.1.1 客户端初始化 2.1.2 服务器端初始化 2.2 本地接收窗口 rcv_wnd 通告 2.2 ...
linux内核协议栈 TCP层数据发送之TSO/GSO
目录 1 基本概念 2 TCP延迟分段判定 2.1 客户端初始化 2.2 服务器端初始化 2.3 sk_setup_caps() 3 整体结构 4. TCP发送路径TSO处理 4.1 tcp_send ...
《嵌入式linux内存使用与性能优化》读书笔记
<嵌入式linux内存使用与性能优化>读书笔记前言本书的重点分为系统内存和性能优化,前4章着重内存使用,尽量减少进程的内存使用量,定位和发现内存泄漏:后5章着重与如何让系统性能优化,加 ...
《嵌入式Linux内存使用与性能优化》笔记
<嵌入式Linux内存使用与性能优化>笔记这本书有两个关切点:系统内存(用户层)和性能优化. 这本书和Brendan Gregg的<Systems Performance>相 ...
【Linux 内核内存管理】优化内存屏障 ③ ( 编译器屏障 | 禁止 / 开启内核抢占与方法保护临界区 | preempt_disable 禁止内核抢占源码 | 开启内核抢占源码 )
文章目录一.禁止 / 开启内核抢占与方法保护临界区二.编译器优化屏障三.preempt_disable 禁止内核抢占源码四.preempt_enable 开启内核抢占源码一.禁止 / ...
#周末课堂# 【Linux + JVM + Mysql高级性能优化班】（火热报名中~~~）
Linux + JVM + Mysql高级性能优化课程课程名称: Linux + JVM + Mysql高级性能优化 QQ群: 243242580(小白.菜鸟勿进)跟Java.M ...
linux 优化 sysctl.conf,Linux内核sysctl.conf的优化设置
Linux内核sysctl.conf的优化设置 Linux #sysctl.conf #优化2012-05-12 10:23 可以通过/etc/sysctl.conf控制和配置Linux内核及网络设置 ...
linux内核协议栈 netfilter 之连接跟踪子系统的L3 L4协议栈模块初始化与自定义注册
目录 1 L3.L4协议跟踪初始化 nf_conntrack_proto_init() 1.1 L3协议管理 1.1.1 struct nf_conntrack_l3proto 1.1.2 L3协议注 ...

Linux内核协议栈 NAT性能优化之FAST NAT

Linux内核协议栈 NAT性能优化之FAST NAT相关推荐

最新文章

热门文章