Synthesizing safe and efficient kernel extensions for packet processing

@article{Xu2021SynthesizingSA,
  title={Synthesizing safe and efficient kernel extensions for packet processing},
  author={Qiongwen Xu and Michael D. Wong and Tanvi Wagle and Srinivas Narayana and Anirudh Sivaraman},
  journal={Proceedings of the 2021 ACM SIGCOMM 2021 Conference},
  year={2021}
}
Extended Berkeley Packet Filter (BPF) has emerged as a powerful method to extend packet-processing functionality in the Linux operating system. BPF allows users to write code in high-level languages (like C or Rust) and execute them at specific hooks in the kernel, such as the network device driver. To ensure safe execution of a user-developed BPF program in kernel context, Linux uses an in-kernel static checker. The checker allows a program to execute only if it can prove that the program is… Expand

References

SHOWING 1-10 OF 237 REFERENCES
n.d.]. Linux Socket Filtering aka Berkeley Packet Filter (BPF)
  • [Online, Retrieved Oct
  • 2020
BPF: a new type of software
  • [Online, Retrieved Jan 19,
  • 2019
The eXpress data path: fast programmable packet processing in the operating system kernel
TLDR
It is shown that XDP achieves single-core packet processing performance as high as 24 million packets per second, and illustrates the flexibility of the programming model through three example use cases: layer-3 routing, inline DDoS protection and layer-4 load balancing. Expand
Markov chain Monte Carlo in Practice
XDP: 1.5 years in production
  • Evolution and lessons learned.
  • 2018
XDP: 1.5 years in production. Evolution and lessons learned
  • In Linux Plumbers Conference,
  • 2018
  • 2021
  • 2021
  • 2021
  • 2021
...
1
2
3
4
5
...