Isolation Mechanisms for High-Speed Packet-Processing Pipelines

on YouTube ↗15m

" summary

Menshen enforces isolation in RMT-style pipelines by attaching a per-tenant VLAN PID to packets, using per-program configuration overlays for parsers and key extractors, and space-partitioning tables and state so processing units remain shared. It provides a P4-16 compiler extension plus lightweight hardware primitives, is prototyped on NetFPGA and Corundum, and synthesizes with FreePDK45nm/Synopsys at 1 GHz with about 6% additional chip area. Evaluation shows disruption-free reconfiguration at packet time scales and line-rate forwarding (100 Gbps at 256B) while preserving program expressivity.

AI-written summary · about

" chapters (18)

1. 0:00Intro
2. 0:33Data-plane programmability is mainstr
3. 1:00Can improve performance for many sy
4. 1:38What is isolation?
5. 2:19Why do existing works not suffice?
6. 3:28How to implement isolation in RMT?
7. 4:29Menshen's high-level approach
8. 5:41Menshen program IDs
9. 6:24Review: How a RMT stage works
10. 7:22Menshen: How overlays work Key extraction enhancements
11. 9:18Menshen: How space partitioning wor Match-action enhancement
12. 9:51Menshen: Action engine enhancemen action entry
13. 10:41Menshen's design principles
14. 11:19Implementation
15. 11:44Evaluation
16. 12:00Can Menshen support multiple prog
17. 12:23Menshen's overall throughput perfo
18. 12:57Does reconfiguration disrupt other pr

" related talks

• 14mEmpower Programmable Pipeline for Advanced Stateful Packet ProcessingYong Feng, Bin Liu, Yang Xu, Zhikang Chen, Haoyu Song, Chuwen Zhang, Yinchao Zhang, Hanyi Zhou, Ruoyu Sun, Wenkuo Dong, Peng Lu, Shuxin Liu · 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24)
• 11mPacket Manipulator Processor A RISC V VLIW Core For Networking ApplicationsSalvatore Pontarelli · 7th RISC-V Workshop 2017
• 22mHodor: Intra-Process Isolation for High-Throughput Data Plane LibrariesJohn Criswell, Mohammad Hedayati, Kai Shen, Michael L. Scott, Mike Marty, Ethan Johnson, Spyridoula Gravani · USENIX ATC '19
• 14mUnderstanding RDMA Microarchitecture Resources for Performance IsolationJitendra Padhye, Xinhao Kong, Jingrong Chen, Wei Bai, Yechen Xu, Mahmoud Elhaddad, Shachar Raindel, Alvin R. Lebeck, Danyang Zhuo · NSDI 2023
• 15mWhen P4 Meets Run-to-completion ArchitectureFeng Gao, Xiaoliang Wang, Wenbo Li, Guihai Chen, Chen Tian, Jiaqi Zheng, Wanchun Dou, Hao Zheng, Xin Yan, Qingqing Zhao, Luyou He, Xiaofei Lai, Fuguang Huang · NSDI '25
• 28mSafe, Modular Packet Pipeline ProgrammingDevon Loehr, David Walker · POPL 2022
• 14mMultitenancy for Fast and Programmable Networks in the CloudXin Jin, Aurojit Panda, Hang Zhu, Tao Wang, Dan R. K. Ports, Anirudh Sivaraman, Fabian Ruffy · HotCloud '20
• 01h 08mThe Network is the Computer: A Programming Language PerspectiveNate Foster · POPL 2024