基于网卡虚拟化的高性能容器网络设计  

Design of High-Performance Container Network Based on Network Interface Card Virtualization

作　　者：臧迪 杨志刚 王晶[1] 姚治成 张伟功[3] ZANG Di;YANG Zhigang;WANG Jing;YAO Zhicheng;ZHANG Weigong(Information Engineering College,Capital Normal University,Beijing 100048,China;Center for Advanced Computer Systems,Institute of Computing Technology,Chinese Academy of Sciences,Beijing 100080,China;Beijing Engineering Research Center of High Reliable Embedded System,Capital Normal University,Beijing 100048,China)

机构地区：[1]首都师范大学信息工程学院,北京100048 [2]中国科学院计算技术研究所先进计算机系统研究中心,北京100080 [3]首都师范大学高可靠嵌入式系统技术北京市工程中心,北京100048

出　　处：《计算机工程》2022年第7期214-219,共6页Computer Engineering

基　　金：国家自然科学基金(62076168)。

摘　　要：单根I/O虚拟化技术为传统数据中心提供高效的服务器整合能力和灵活的应用部署能力,通过将多个网卡直通到虚拟机,减少额外包复制带来的性能损失,使得网络I/O具有接近主机的性能。然而,在网络功能虚拟化场景下单独使用单根I/O虚拟化技术会降低传统数据中心的网络I/O虚拟化性能。针对网络功能虚拟化长链场景,结合单根I/O虚拟化技术和软件虚拟化技术,设计基于网卡虚拟化的高性能容器网络。通过转发模块判断网络流量的目的地址,寻找最优的流量转发路径,实现流量的灵活转发。利用基于脚本程序的自动化部署模块,对每个节点业务进行支持动态增删服务的配置,便于用户对网络进行管理和修改。实验结果表明,在网络功能虚拟化长链场景下,相比单根I/O虚拟化技术,该网络延迟降低约20%,同时能够有效提高网络吞吐量,解决数据中心的网络I/O虚拟化问题。Single Root I/O Virtualization(SR-IOV)technology provides traditional data centers with efficient server integration and flexible application deployment capabilities.To reduce the performance loss caused by additional packet replication,SR-IOV technology connects multiple network interface cards directly to the virtual machine,bringing the network I/O performance closer to that of the host.However,SR-IOV technology in the Network Function Virtualization(NFV)scenario degrades the performance of traditional data center virtualization.For the combined use of SR-IOV and software virtualization technology in such scenarios,a high-performance container network based on network interface card virtualization is designed. A forwarding module is used to determine the destination address,find the optimal forwarding path,and ensure the flexible forwarding of network traffic.A fully automatic deployment module based on a script program is used to support dynamic addition and deletion services configuration for the business of each node,facilitate users to manage and modify the network,and improve the module’s adaptability. Experimental results show that the network’s delay in the NFV long chain scenario is about 20% lower than that of SR-IOV technology,as the former improves throughput.This solves network I/O virtualization issues in data centers.

关 键 词：单根I/O虚拟化 网络功能虚拟化 网卡虚拟化 容器网络 数据中心 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]