基于数据处理器的QUIC加密/解密卸载

QUIC encryption and decryption offloading based on data processing unit

QUIC作为与TCP并行的新兴传输协议,其优化方法沿用TCP研究路线,其中的主流是硬件卸载技术,将计算密集型功能模块卸载到网络设备,使用硬件卸载的方式代替主机CPU进行计算。然而由于硬件卸载通用性较差,性能虽高但无法保证用户可编程性。为了克服这个限制,提出了软件卸载模型——NanoBPF,基于DPU中RISC众核的协议卸载模型,通过修改BootLoader的启动代码,引导启动eBPF代码作为运行时环境,对协议栈中CPU占用率较高的加密/解密功能模块进行软件卸载。其中,加密/解密功能模块使用高级语言(C)编写,并被编译成自定义的BPF字节码动态载入DPU。通过本地和基于Docker的网络拓扑对该原型系统的吞吐量和公平性进行验证,结果表明,报文加密/解密的软件卸载能提高协议栈近13%的报文吞吐率,且在一定条件下能够保证与TCP的链路公平性。

QUIC,as an emerging transmission protocol parallel to TCP,follows the TCP research approach.The mainstream research way is hardware offloading,which offloads computation-intensive functional modules to network devices and replaces host CPU computation by hardware processing.However,due to the poor generality of hardware offloading,although its performance is high,it cannot guarantee user programmability.To overcome this limitation,this paper proposes a software offloading model—NanoBPF,which is a protocol offloading model based on the RISC-style many-core DPU(Data Processing Unit).By modifying the Bootloader's startup code,it guides the eBPF(extended Berkeley Packet Filter)code as a runtime environment and offloads encryption and decryption functional modules with high CPU utilization rates in the protocol stack using software.The encryption and decryption functional modules are written in high-level languages(C)and compiled into custom BPF(Berkeley Packet Filter)bytecode dynamically loaded into the DPU.The throughput and fairness of the prototype system are validated using local and Docker-based network topologies.The results show that software offloading of message encryption and decryption can increase the message throughput of the protocol stack by nearly 13%,and under certain conditions,it can ensure link fairness with TCP.