Programmable NIC VXLAN Decapsulation for Low-Latency RDMA

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

RDMA messages in virtual private cloud environments experience delays due to software forwarding by virtual switches, which fail to meet delay requirements.

Innovation Solution

Implementing a remote direct memory access method using a hardware programmable network interface card to perform VXLAN decapsulation and access control on RoCE messages, preconfigured based on virtual switch software, to reduce delays and enhance processing efficiency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If software forwarding is used by virtual switch, then ease of operation and flexibility are improved, but message delay increases

Engineering Contradiction:

Improvesoftware forwarding flexibilityVSAvoidRDMA message delay

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

The patent replaces the software-based virtual switch forwarding mechanism with a hardware-based network interface card that performs VXLAN decapsulation and access control in hardware. This substitution eliminates the software processing bottleneck and significantly reduces RDMA message delay while maintaining the functional capabilities of the virtual switch.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces a hardware programmable network interface card as an intermediary between the virtual machine and the physical network. This intermediary device is preconfigured with virtual switch software functions, enabling it to perform VXLAN decapsulation and access control in hardware, thereby reducing delay while maintaining virtualization benefits.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Loss of time

If hardware processing is implemented, then message delay is reduced, but device complexity increases

Engineering Contradiction:

ImproveRDMA message delayVSAvoidhardware configuration complexity

Core Design Contradiction:

Loss of timeVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by preconfiguring the hardware programmable network interface card with the virtual switch software functions before the virtual machine operates. The VXLAN decapsulation and access control rules are loaded into the hardware in advance, eliminating the need for complex runtime configuration and reducing operational complexity despite the hardware acceleration.

Inventive Principle:

Principle #10Preliminary action

3Productivity

If access control is performed in hardware, then processing speed is improved, but security policy flexibility may be reduced

Engineering Contradiction:

Improvemessage processing speedVSAvoidaccess control policy flexibility

Core Design Contradiction:

ProductivityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamics by enabling the hardware programmable network interface card to be dynamically reconfigured through software programming. The access control policies and VXLAN decapsulation rules can be updated in the hardware without requiring physical reconfiguration, maintaining flexibility in security policies while achieving high-speed hardware processing.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS20260003661A1Remote direct memory access method and apparatus

Publication Date: 2026.01.01 BEIJING VOLCANO ENGINE TECH CO LTD

AI summary

Embodiments of the present application provide a remote direct memory access method and apparatus, and relate to the field of computer technologies. The method includes: receiving a first virtual extensible local area network (VXLAN) message sent by a first virtual machine to a second virtual machine through a VXLAN tunnel, where the first VXLAN message is generated by performing VXLAN encapsulation on a remote direct memory access (RDMA) over Converged Ethernet (RoCE) message; and performing VXLAN decapsulation on the first VXLAN message through a hardware programmable network interface card based on a virtual switch, to obtain a first RoCE message, and performing access control on the first RoCE message through the hardware programmable network interface card, where the hardware programmable network interface card based on the virtual switch is preconfigured based on software of the virtual switch.