Network Entitlement: From Hose-based Approval to Host-based Admission

on YouTube ↗17m

" summary

Meta moves from pipe-based contracts to a host model that replaces O(n^2) pipe agreements with O(n) host entitlements, uses a tree‑based regression (historical demand plus planned power) for forecasts, and reports as much as a quarter reduction in aggregated demand versus pipe sizing. Runtime enforcement runs BPF-based per-server marking (plus DHCP marks) to classify non‑conforming bytes, network queues deprioritize those packets, and periodic large‑scale tests validate behavior in production.

AI-written summary · about

" chapters (11)

1. 0:00Network Entitlement intro
2. 1:08Traffic isolation challenges
3. 2:36Network Entitlement solution
4. 3:59Hose vs pipes model
5. 5:46Entitlement contract approval
6. 9:17Runtime enforcement overview
7. 10:40Handling non-conforming traffic
8. 12:45BPF with distributed policies
9. 14:33Production validation results
10. 15:38Key benefits and accountability
11. 16:40Testing and ops simplicity

" related talks

• 19mNet-P4ct: Enhanced WAN Bandwidth Fair Sharing Using P4 Programmable SwitchesHongyu Wu, Yongping Tang, Haoran Chen, Mingwei Cui, Yihan Zou, Yihang Miao, Suhan Jiang, Damu Ding, Lirong Lai, Ming Gao, Rui Jiang, Shengyuan He, Anjian Chen, Jiaming Shi, Junjie Wan, Yandong Duan, Ruomin Fang, Qiao Kang, Guangrui Wu, Xiyun Xu · NSDI '26
• 17mNetHint: White-Box Networking for Multi-Tenant Data CentersWei Zhang, Ion Stoica, Jingrong Chen, Danyang Zhuo, Hong Zhang, Liang Luo, Jeffrey Chase · 19th USENIX Symposium on Networked Systems Design and Implementation (NSDI '22)
• 28mSafe sharing of the network with eBPFPrankur Gupta, Balasubramanian Madhavan · Linux Plumbers Conference 2023
• 26mPerformance Contracts for Software Network FunctionsRishabh Iyer, Solal Pirelli, Katerina Argyraki, George Candea, Luis Pedrosa, Arseniy Zaostrovnykh · NSDI 2019
• 24mNetBlocks: Staging Layouts for High-Performance Custom Host Network StacksSaman Amarasinghe, Ajay Brahmakshatriya, Chris Rinard, Manya Ghobadi · PLDI 2024
• 24mReal Time Network Policy Checking Using Header Space AnalysisMichael Chang, Nick McKeown, George Varghese, Hongyi Zeng, Peyman Kazemian, Scott Whyte · NSDI 2013
• 18mPast, Present, and Future of Network OperationsDavid Barroso · SREcon16 Europe
• 28mJobber: Automating Inter-Tenant Trust in the CloudDirk Grunwald, Andy Sayler, Eric Keller · HotCloud '13