Maximizing Tunneling Performance for Network Overlays

By David Le Goff – 6WIND Product Marketing Manager

Network overlay challenges

Thanks to on-going increases in processor performance, the number of Virtual Machines per server blade is expected to grow rapidly, from typically 20 today to a hundred in 2016. Given this growth, the virtual switch that is present on each server blade will need to distribute significantly increasing volumes of network traffic, becoming a strategic focus for networking equipment suppliers and service providers.

One of the leading applications for network virtualization is the ability to provide network overlays (or tunneling) within the server, distributing applications to multiple users as part of enabling multi-tenant installations. When implemented in an edge node such as a server, well-implemented network overlays allow the establishment of an unlimited number of virtual networks, bypassing the 4K limitation of VLANs.

One of the proposed standards for network overlays relies on the RFC-based GRE (Generic Routing Encapsulation) implementation (RFC 2784). It uses some of the optional GRE field headers to build multi-tenant-aware tools for traffic analysis, traffic inspection, and monitoring with a 24-bit identifier, allowing up to 16 million virtual subnets in the same management domain, in contrast to the limitation of VLANs.

One of the major issues for networking OEMs is the challenge of handling millions of tunnels at high performance, because of the limitations of standard, un-optimized OS networking stacks. Various initiatives are underway to offload traffic shaping functions such as ACL and QoS to optimized Network Interface Cards (NICs). Hardware upgrades, however, are always slower to implement than software changes. In addition, server blades and other hardware are typically standardized throughout a data center, to facilitate management, and selective hardware (NIC) upgrades add significant complexity to the overall management environment.

6WINDGate provides high-performance tunneling

The 6WINDGate packet processing software provides tunneling mechanisms within its networking fast path, enabling OEMs to achieve high performance using commodity processor platforms and NICs. With traffic engineering functions also available in 6WINDGate, this provides an integrated, hardware-independent solution for network overlay challenges.

The following graph illustrates 6WINDGate’s GRE performance on an Intel Westmere platform, demonstrating that performance is independent of packet size.

 

System benefits

By providing both network performance enhancements for virtualized architectures and a rich set of optimized Layer 2 through 7 networking protocols for Intel platforms, fully-compatible with standard hypervisors, 6WINDGate solves network performance bottlenecks and enables advanced networking functions to run at high performance on virtual switches (instantiated on application servers). 6WINDGate provides an efficient solution for multitenant architectures, significantly improving the cost-performance of virtual appliances.

Post a Reply