From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 115F33B29E for ; Thu, 16 Mar 2017 11:52:29 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 4962CE23E; Thu, 16 Mar 2017 12:15:39 -0400 (EDT) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 4D1C5636BB; Thu, 16 Mar 2017 11:52:29 -0400 (EDT) From: Michael Richardson To: Dave Taht cc: bloat In-Reply-To: References: X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Subject: Re: [Bloat] high speed packet and protocol processing in userspace? X-BeenThere: bloat@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: General list for discussing Bufferbloat List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Mar 2017 15:52:30 -0000 --=-=-= Content-Type: text/plain Dave Taht wrote: > Is it faster to execute 17 bpf vm instructions on (nearly) every > packet, or to use all that old stuff? > bpf example for the babel protocol: I have no data for you. Andrew McGregor might know more? My understanding is that there is a JIT for ebpf. > B) Are there any means of easily abstracting deeper protocol processing > into a higher level grammar, better than tcpdump? I found one tool, > that I like conceptually - for deeply decoding a protocol - tcpdump just exposes the libpcap compiler. It has many annoying limitations. > I've googled, and thunk, and maybe I'm merely asking the wrong > questions, and "the packet analysis tool to end all tools" already > exists? Yes, people have produced them, but they go nowhere because they are too specialized, or too general. The question is: are you trying to build a tcp stack that punts packets at applications, or do "analysis" --- which I interpret to mean to collect statistics. > C) Are vendors like mellonox or others doing network offloads parsing > bpf or ebpf directly yet? I don't know. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAljKtLwACgkQgItw+93Q 3WWqXgf6A7kByrN1x0CJ2Opye0dWKj4FSzFCZ+152IXnUxj1C2RLDpE/CseUQ9Tq EW2a6smZC9NSpBTa4atzEjBUwId5vtIfJHLzX/a75S+MvlOH+4b2Rph/WNYTsumb Rjar95EKaycGu/1hegEjSCkaBopwMsxUJBh8KbY4pH5ocdfxpnsyoTbRX6F9vd18 dapacBj6P2tneZYK8YtzsG2MHBv/BbyWJrBOaekLzdVdA4TVcLaKPMr3mZUleZZh jXWvIuybgrrMsg1bcMgL+fEAHubXjNXY0hv24B/HYW4uf0gFUxcaOb4j4+UBOaxA CrpKkhfm2LcYJ4feInXakQv7PPfnxg== =Xg7+ -----END PGP SIGNATURE----- --=-=-=--