1

Creating Complex Network Service with eBPF: Experience and Lessons Learned

Toward an eBPF-based clone of iptables

Iptables, which is currently the most common firewall on Linux, has shown several limitations over the years, with scalability as a big concern. This paper reports the first results of a project that aims at creating a (partial) clone of iptables, …

Partial offloading of OpenFlow rules on a traditional hardware switch ASIC

OpenFlow represents a new powerful paradigm that combines the flexibility of the software with the efficiency of a programmable hardware switch. However, such an approach is currently reserved for new hardware devices, specifically engineered for …

Enabling NFV services on resource-constrained CPEs

Virtual Network Functions (VNFs) are often implemented using virtual machines (VMs) because they provide an isolated environment compatible with classical cloud computing technologies. Unfortunately, VMs are demanding in terms of required resources …