cilium - bpf & xdp for containers
TRANSCRIPT
○○○○○
●○○
⇒
⇒
●
●
●○○
●○
●○
●●
○○
Frontend BackendLB
FE BELB
LBFE
FE BE
LB
●●
○○
Frontend BackendLB
FE BELB
LBFE
FE BE
LB
Prod
Frontend BackendLB
FE BELBQA
Prod
QA
Prodrequires
requires QA
QA
●○
FE
BE
LB Prod
QA
Prod
Prod
FE
BE
LB
QA
QA
10111213141516
Cluster Wide Label ID Table: This ID is carried in the network packet and used to reconstruct the label context at the receiving host.
Policy enforcement cost is reduced to a single hashtable lookup regardless of complexity.
●○
●○○
●
●●●
FE
BE
LB
LBECMP
FE
FE
BE
BE
BE
Small HTTP GET
Ultra HD Cat Pictures/Videos
Intel Xeon 3.5Ghz Sandy Bridge, 24 cores, 1 TCP flow per core, netperf -t TCP_SENDFILE, 10’000 policies
●●●
●●●
●●●●●●●