Cilium - Container Networking with BPF & XDP
3 likes5,041 views
The document discusses a network architecture involving frontend and backend components with a focus on load balancing (lb) and policy enforcement through a cluster-wide label ID system. It highlights reduced costs in policy enforcement due to a simplified hashtable lookup. Additionally, it mentions performance tests involving Intel Xeon processors and handling large amounts of policies.
1 of 15
Downloaded 112 times
Cilium - Container Networking with BPF & XDP
- 4. ● ○ ● ○ ○ ●
- 8. ● ● ○ ○ Frontend BackendLB FE BE LB LB FE FE BE LB Prod Frontend BackendLB FE BELB QA Prod QA Prodrequires requires QA QA
- 9. ● ○ FE BE LB Prod QA Prod Prod FE BE LB QA QA 10 11 12 13 14 15 16 Cluster Wide Label ID Table: This ID is carried in the network packet and used to reconstruct the label context at the receiving host. Policy enforcement cost is reduced to a single hashtable lookup regardless of complexity.
- 10. ● ● ● FE BE LB LB ECMP FE FE BE BE BE Small HTTP GET Ultra HD Cat Pictures/Videos
- 12. Intel Xeon 3.5Ghz Sandy Bridge, 24 cores, 1 TCP flow per core, netperf -t TCP_SENDFILE, 10’000 policies