Say hello to Libzero
Last year we have introduced PF_RING DNA for implementing 0% CPU receive/transmission on commodity 1/10 Gbit network adapters. We considered DNA as a starting point, as it implemented high-speed RX/TX that was enough for most, but not all of you. This is because commodity adapters do not feature advanced packet balancing techniques as they rely [...]
PF_RING DNA RFC 2544 Benchmark
Over the past couple of weeks we have further improved the DNA performance, and thus we have decided to test its performance. In order to do reproducible measurements we decided to adopt the benchmark specified in RFC 2544. You can find the complete test details and results on this document: DNA_ip_forward_RFC2544.
As you can [...]
Benchmarking PF_RING DNA
For years networking companies have used the buzzword zero-copy to qualify those hardware/software solutions that allow applications to play with packets without the need to copy them at all. Zero-copy needs DMA (Direct Memory Access) for operating so that applications do not get a (shallow) copy of packets but they actually get the pointer [...]
Precise Interface Merging Without Hardware Timestamps
In network monitoring it is very common to use taps for duplicating network traffic (RX and TX directions).
Taps are important as they allow network probes to operate passively without interfering with network operations. The two traffic directions (A to B and B to A) are plugged into two network ports of the [...]
DNA vs netmap
In the past months I have received a few emails about how to position DNA with respect to netmap. To many people they look like two competing solutions, but in reality they are just two solutions to the same problem. Yesterday I had a nice meeting with Luigi Rizzo, the author of netmap.
PF_RING in 2012
From time to time the kernel folks are sick and tired of people saying PF_RING is better than what we have upstream, it really isn’t. Fortunately (for PF_RING) the story is a bit different not to mention that some of PF_RING features such as clustering have probably inspired AF_PACKET too.
For 2012 we have [...]
Exploiting Hardware Filtering in PF_RING-aware apps, Snort…
Introduction
PF_RING filters have been designed to be efficient and versatile. PF_RING-based applications can use them for both reducing the amount of packets they need to process, and passing incoming packets to kernel plugins for further processing.
Years ago, hardware packet filtering was limited to costly FPGA-based NICs, whereas today it is available also on [...]
Released PF_RING 5.1 and TNAPIv2
PF_RING 5.1 is a maintenance release that addresses some issues we identified in 5.0 that we released early this month. We have listen to your comments and tried to improve our software applications both in terms of stability and speed.
In this release we introduce (PF_RING 5.0 was lacking TNAPI as we were busy coding [...]
Inline Snort Multiprocessing with PF_RING
Dear all,
our friends at MetaFlows have tested snort on top of PF_RING DAQ using 6765 Emerging Threats Pro rules. Using PF_RING-aware drivers (that are not optimized at all for TX), they have achieved a sustain rate of 700 Mbit in IPS mode. Guess what you can do using DNA.
Low RX/TX Latency with DNA
One of the great consequences of the DNA design, is that user-space applications can now transmit and receive packets without going through the kernel TCP/IP stack at all. This can be profitably used to reduce network latency bypassing the stack, and reading the number of user-space stacks that have been developed in the past years [...]
Browse By Date
- May 2012 (2)
- April 2012 (1)
- March 2012 (2)
- February 2012 (4)
- January 2012 (2)
- December 2011 (1)
- November 2011 (2)
- September 2011 (5)
- August 2011 (3)
- July 2011 (2)
- June 2011 (4)
- May 2011 (6)
- April 2011 (3)
- March 2011 (4)
- February 2011 (5)
- January 2011 (2)
- December 2010 (1)
- November 2010 (4)
- October 2010 (4)
- September 2010 (4)
- August 2010 (1)
- July 2010 (4)
- June 2010 (4)
- May 2010 (5)
- April 2010 (3)
- March 2010 (2)
- February 2010 (3)
- January 2010 (3)
- December 2009 (1)
