作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2022, Vol. 48 ›› Issue (7): 214-219. doi: 10.19678/j.issn.1000-3428.0061999

• 体系结构与软件技术 • 上一篇    下一篇

基于网卡虚拟化的高性能容器网络设计

臧迪1, 杨志刚1, 王晶1, 姚治成2, 张伟功3   

  1. 1. 首都师范大学 信息工程学院, 北京 100048;
    2. 中国科学院计算技术研究所 先进计算机系统研究中心, 北京 100080;
    3. 首都师范大学 高可靠嵌入式系统技术北京市工程中心, 北京 100048
  • 收稿日期:2021-07-07 修回日期:2021-09-26 出版日期:2022-07-15 发布日期:2021-10-15
  • 作者简介:臧迪(1995—),男,硕士,主研方向为计算机体系结构、智能芯片;杨志刚(通信作者),副教授、硕士;王晶,教授、博士;姚治成,工程师、硕士;张伟功,研究员、博士。
  • 基金资助:
    国家自然科学基金(62076168)。

Design of High-Performance Container Network Based on Network Interface Card Virtualization

ZANG Di1, YANG Zhigang1, WANG Jing1, YAO Zhicheng2, ZHANG Weigong3   

  1. 1. Information Engineering College, Capital Normal University, Beijing 100048, China;
    2. Center for Advanced Computer Systems, Institute of Computing Technology, Chinese Academy of Sciences, Beijing 100080, China;
    3. Beijing Engineering Research Center of High Reliable Embedded System, Capital Normal University, Beijing 100048, China
  • Received:2021-07-07 Revised:2021-09-26 Online:2022-07-15 Published:2021-10-15

摘要: 单根I/O虚拟化技术为传统数据中心提供高效的服务器整合能力和灵活的应用部署能力,通过将多个网卡直通到虚拟机,减少额外包复制带来的性能损失,使得网络I/O具有接近主机的性能。然而,在网络功能虚拟化场景下单独使用单根I/O虚拟化技术会降低传统数据中心的网络I/O虚拟化性能。针对网络功能虚拟化长链场景,结合单根I/O虚拟化技术和软件虚拟化技术,设计基于网卡虚拟化的高性能容器网络。通过转发模块判断网络流量的目的地址,寻找最优的流量转发路径,实现流量的灵活转发。利用基于脚本程序的自动化部署模块,对每个节点业务进行支持动态增删服务的配置,便于用户对网络进行管理和修改。实验结果表明,在网络功能虚拟化长链场景下,相比单根I/O虚拟化技术,该网络延迟降低约20%,同时能够有效提高网络吞吐量,解决数据中心的网络I/O虚拟化问题。

关键词: 单根I/O虚拟化, 网络功能虚拟化, 网卡虚拟化, 容器网络, 数据中心

Abstract: Single Root I/O Virtualization(SR-IOV) technology provides traditional data centers with efficient server integration and flexible application deployment capabilities.To reduce the performance loss caused by additional packet replication, SR-IOV technology connects multiple network interface cards directly to the virtual machine, bringing the network I/O performance closer to that of the host.However, SR-IOV technology in the Network Function Virtualization (NFV) scenario degrades the performance of traditional data center virtualization.For the combined use of SR-IOV and software virtualization technology in such scenarios, a high-performance container network based on network interface card virtualization is designed.A forwarding module is used to determine the destination address, find the optimal forwarding path, and ensure the flexible forwarding of network traffic.A fully automatic deployment module based on a script program is used to support dynamic addition and deletion services configuration for the business of each node, facilitate users to manage and modify the network, and improve the module's adaptability.Experimental results show that the network's delay in the NFV long chain scenario is about 20% lower than that of SR-IOV technology, as the former improves throughput.This solves network I/O virtualization issues in data centers.

Key words: Single Root I/O Virtualization(SR-IOV), Network Function Virtualization(NFV), network interface card virtualization, container network, data center

中图分类号: