HOWTO. High Packet Rate on x86-64: Clearing the Bar of 14.88 Mpps

No ratings

Presented at phdays 2013 by

Alexander Lyamin

Since new tools like netmap и PF_RING DNA became available for intruders, attacks leveraging multiple packets of minimum size have been gaining greater popularity. What is the mechanism of such attacks and which vulnerabilities in the design of modern server platforms do they exploit? What to oppose them by, having a vanilla Linux kernel and standard Intel equipment in hand? How, with usual equipment, to reach the maximum packet rate for a 10GbE environment — 14.88 Mpps? What restrictions such a solution will have and how to overcome them? Alexander Lyamin is the head of the Highload Lab. Previously he managed projects in the company Astrum Online Entertainment, dealt with web applications' platform IT-architecture, advised groups of external developers, launched a number of Russian Internet service providers (Comstar, Teleport-TP, Cityline), and worked on the creation of the first Russian multiservice ATM-network at Moscow State University. His research projects include Mirnet, Net Surveyor, IPv6 testing ground, RFBR IP QoS research grants, and participating in the development of ReiserFS (DARPA grant).Alexander Lyamin Alexander Lyamin