MiddleNet：一种结合eBPF与DPDK的统一高性能NFV和中间盒框架
MiddleNet: A Unified, High-Performance NFV and Middlebox Framework with eBPF and DPDK
AI总结：
针对L2/L3网络功能与L4/L7中间盒依赖不同平台的问题，提出结合DPDK与eBPF的统一框架MiddleNet，支持多层级功能链与动态流处理，在统一环境下实现高性能。
摘要：
传统网络驻留功能（如防火墙、网络地址转换）和中间盒（缓存、负载均衡器）已从专用硬件设备转向软件化组件。然而，L2/L3层网络功能（NF）目前在广泛采用内核旁路技术的网络功能虚拟化（NFV，Network Function Virtualization）平台上实现，通常使用DPDK（Data Plane Development Kit，数据平面开发套件）实现零拷贝转发以获取高性能。另一方面，更侧重功能性的L4/L7层中间盒则依托成熟的基于内核的系统运行。\nL2/L3层网络功能与L4/L7层中间盒仍由不同节点上的独立平台处理。本文提出MiddleNet，构建了一个同时支持L2/L3层网络功能与L4/L7层中间盒的统一网络驻留功能框架，支持NFV和中间盒场景中均不可或缺的功能链。MiddleNet采用DPDK库实现无中断处理的零拷贝报文转发，满足NFV所需的“串接式”L2/L3处理性能。为支撑L4/L7层中间盒功能，MiddleNet使用统一的基于内核的协议栈进行处理，无需为每个功能配备专用协议栈。MiddleNet充分利用eBPF（extended Berkeley Packet Filter，扩展伯克利包过滤器）的事件驱动能力，并将其与共享内存无缝集成，实现L4/L7中间盒功能链的高性能通信。MiddleNet在L4/L7层的开销严格与负载成正比，无需DPDK类方案所需的专用CPU核心。MiddleNet还借助SR-IOV（Single Root I/O Virtualization，单根I/O虚拟化）支持流相关的报文处理，可动态选择所需的报文处理层级（2-7层）。实验结果表明，MiddleNet在这种统一环境下实现了高性能。
英文摘要：
Traditional network resident functions (e.g., firewalls, network address translation) and middleboxes (caches, load balancers) have moved from purpose-built appliances to software-based components. However, L2/L3 network functions (NFs) are being implemented on Network Function Virtualization (NFV) platforms that extensively exploit kernel-bypass technology. They often use DPDK for zero-copy delivery and high performance. On the other hand, L4/L7 middleboxes, which have a greater emphasis on functionality, take advantage of a full-fledged kernel-based system. L2/L3 NFs and L4/L7 middleboxes continue to be handled by distinct platforms on different nodes. This paper proposes MiddleNet that develops a unified network resident function framework that supports L2/L3 NFs and L4/L7 middleboxes. MiddleNet supports function chains that are essential in both NFV and middlebox environments. MiddleNet uses the Data Plane Development Kit (DPDK) library for zero-copy packet delivery without interrupt-based processing, to enable the "bump-in-the-wire" L2/L3 processing performance required of NFV. To support L4/L7 middlebox functionality, MiddleNet utilizes a consolidated, kernel-based protocol stack for processing, avoiding a dedicated protocol stack for each function. MiddleNet fully exploits the event-driven capabilities of the extended Berkeley Packet Filter (eBPF) and seamlessly integrates it with shared memory for high-performance communication in L4/L7 middlebox function chains. The overheads for MiddleNet in L4/L7 are strictly load-proportional, without needing the dedicated CPU cores of DPDK-based approaches. MiddleNet supports flow-dependent packet processing by leveraging Single Root I/O Virtualization (SR-IOV) to dynamically select the packet processing needed (Layers 2 - 7). Our experimental results show that MiddleNet achieves high performance in such a unified environment.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
