News for hackers. Stuff that matters.
Re:Unscrewed: A Story About OpenBSD by wolf550e on Thursday January 14, 2016 @07:45AM (#10900995)
Can that hardware keep up with crypto bitrate and firewall rules, on multiple 10gb links?
Re:Unscrewed: A Story About OpenBSD by corysama on Thursday January 14, 2016 @11:45AM (#10902492)
The Snabb Switch crew are starting to work on support for basic handling of packets on 100G NICs. However...

> With the new CPUs tending to increase the core count while the CPU frequency goes down, we'll get less and less "CPU cycles per packet". For example E5-2699v3 45M is 18 [email protected]. 10Gbps with 256 byte packets is achieved with 4.53Mpps, this makes ~500 clocks per packet on this CPU. Now make this 100Gbps and you get 50 clocks. You get this budget to receive, process and send the packet. 50 sounds pretty low to me.

Numbers refer to using only a single core. That particular CPU has 18 cores and 36 hardware threads.

https://groups.google.com/forum/m/#!topic/snabb-devel/pDd_uB...

Re:Unscrewed: A Story About OpenBSD by richardwhiuk on Thursday January 14, 2016 @11:53AM (#10902564)
Normally the solution is to have the NIC give you multiple receive queues and then tie each queue to a different core, meaning you get a packet on each core every time you clock them off the NIC. Increasing CPU cores gives you a massive win when you do that.

(On a hardware note, increasing cores and decreasing frequency makes the CPU look more like an ASIC :) )

Re:Unscrewed: A Story About OpenBSD by jlgaddis on Thursday January 14, 2016 @11:30AM (#10902345)
Did you actually RTFA?

> The only reason I use “real” network gear anymore is ... for core routing 10gbps links.

Re:Unscrewed: A Story About OpenBSD by wolf550e on Thursday January 14, 2016 @02:55PM (#10903968)
Article is old; situation in 2016 might be different.
Re:Unscrewed: A Story About OpenBSD by _yy on Thursday January 14, 2016 @07:58AM (#10901058)
Probably not. All of the big vendors use some sort of hardware acceleration to achieve >= 10gb.

There's some progress, though (like PF_RING in Linux and netmap on FreeBSD).

Re:Unscrewed: A Story About OpenBSD by omgtehlion on Thursday January 14, 2016 @08:46AM (#10901305)
if by “multiple” you mean 2x, then yes ;)

still, you need some tweaking or things like dpdk/openonload/vma/etc...