Cilium - BPF & XDP for containers

Preview:

Citation preview

○○○○○

●○○

●○○

●○

●○

●●

○○

Frontend BackendLB

FE BELB

LBFE

FE BE

LB

●●

○○

Frontend BackendLB

FE BELB

LBFE

FE BE

LB

Prod

Frontend BackendLB

FE BELBQA

Prod

QA

Prodrequires

requires QA

QA

●○

FE

BE

LB Prod

QA

Prod

Prod

FE

BE

LB

QA

QA

10111213141516

Cluster Wide Label ID Table: This ID is carried in the network packet and used to reconstruct the label context at the receiving host.

Policy enforcement cost is reduced to a single hashtable lookup regardless of complexity.

●○

●○○

●●●

FE

BE

LB

LBECMP

FE

FE

BE

BE

BE

Small HTTP GET

Ultra HD Cat Pictures/Videos

Intel Xeon 3.5Ghz Sandy Bridge, 24 cores, 1 TCP flow per core, netperf -t TCP_SENDFILE, 10’000 policies

●●●

●●●

●●●●●●●

Recommended