For security gateway or VPN applications VPP needs to encrypt/decrypt traffic. Encrypting the traffic with software only can take upwards of 95% of total packet processing time. By enabling hardware offload and CPU Optimized Instruction for encryption, VPP IPsec can show performance improvements in the region of 5/6X. Additionally, in an SDN deployment scenario VPP may be deployed on platforms with varying encryption offload capabilities. This offload support in VPP allows it to make maximum usage of the available underlying platform capabilities.
I'm a Senior Software Engineer with Intel based in Shannon Ireland. I have 13 years' experience working in networking, packet processing and telecommunications areas.
Monday September 26, 2016 2:20pm - 2:45pm PDT
Room 401/402