Bifrost: Analysis and Optimization of Network I/O Tax in Confidential Virtual...
summary
Existing confidential VMs lose CPU to a measurable CVM-IO tax that can consume >50% of vCPU cycles; this work builds Bifrost, a para-virtualized I/O prototype (800 LOC in guest Linux, 700 LOC in backend) that eliminates I/O payload bouncing by removing redundant encryption and uses pre-receiver packet reassembly to cut packet-processing overhead. Evaluated on AMD and Intel servers over 200GbE, Bifrost restores application vCPU time and improves I/O performance, outperforming traditional VMs by up to 21.5%.
AI-written summary · about
chapters (9)
- 0:00Introduction to CVMs
- 1:04CVM security and overview
- 1:59Performance bottlenecks
- 3:40Quantifying CVM overhead
- 5:03Analysis of CVM attacks
- 8:35Design of Defrost
- 10:35Defrost design components
- 14:47Evaluation and results
- 17:12Conclusion and availability
related talks
17mBifrost: Alibaba's Next-Generation VPC Network with High-Performance Multipath...
37mEfficient and Flexible Virtual Machine Networking Through eBPF
17mZOC: Elastic and Cost-Efficient Virtual SmartNIC Architecture for Cloud Physical Machines
35mWhy OCP networking performances on VMs are suboptimal and how to improve them by 5x
32mTo InfiniBand and Beyond!
17mRearchitecting the TCP Stack for I/O-Offloaded Content Delivery
30mHA-IOV: Applying Hardware-assisted Techniques to IO Virtualization Framework
17mFisc: A Large-scale Cloud-native-oriented File System