NFV Packet Filter Forwarding Without Proxy Data Copies
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data forwarding schemes in network function virtualization (NFV) involve multiple data copies, leading to packet boundary loss and inefficiencies in bandwidth utilization, particularly in multi-tenant environments.
Innovation Solution
Implementing packet filters, such as Berkeley Packet Filters (BPF), to directly forward network packets to identified connections based on link layer protocol fields, bypassing the proxy application, thereby eliminating unnecessary data copies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If existing data forwarding schemes are used in NFV, then packet forwarding can be achieved, but multiple data copies are created leading to packet boundary loss and bandwidth utilization inefficiencies
Solution Approach 1:
The patent extracts the packet filtering functionality from the proxy application and implements it directly in the network interface controller (NIC) using hardware-based packet filters. This extraction eliminates the need for the proxy application to copy and process packets, allowing direct forwarding from NIC to virtual machine while maintaining filtering capabilities.
Solution Approach 2:
The patent introduces a packet filter as an intermediary component between the NIC and the virtual machine. This filter operates at the hardware level in the NIC, enabling direct packet forwarding without requiring software-based copying and processing by the proxy application, thus eliminating unnecessary data copies.
2Reliability
If proxy application processes all packets, then packet filtering can be performed, but bandwidth utilization is reduced due to multiple data copies
Solution Approach 1:
The patent replaces the software-based packet processing mechanism (proxy application copying and processing packets) with a hardware-based mechanism (NIC-integrated packet filters). This substitution eliminates the need for mechanical data copying operations while maintaining packet filtering and integrity verification capabilities.
Solution Approach 2:
The patent extracts packet filtering functionality from the software proxy application and relocates it to the hardware NIC. This extraction allows the NIC to directly filter and forward packets based on filter rules without requiring software intervention, thereby maintaining packet integrity while eliminating bandwidth-wasting data copies.
3Ease of operation
If multiple data copies are created for packet forwarding, then packet processing can be performed, but packet boundary loss occurs and efficiency decreases
Solution Approach 1:
The patent introduces hardware-based packet filters in the NIC as intermediaries that process packets directly at the network interface level. These filters maintain packet boundaries and forwarding rules in hardware, eliminating the need for software-based copying that causes packet boundary loss, while still enabling comprehensive packet processing and filtering capabilities.
Data Source
AI summary
Systems and methods for zero-copy forwarding for network function virtualization (NFV). An example method comprises: receiving, by a supervisor of a host computer system, a definition of a packet filter originated by a virtual execution environment running on the host computer system; responsive to validating the packet filter, associating the packet filter with a vNIC of the virtual execution environment; receiving, by the supervisor, a network packet originated by the vNIC; and responsive to matching the network packet to a network connection specified by the packet filter, causing the packet filter to forward the network packet via the network connection.