基于XDP的高速流量采集技术研究  

Research on high-speed traffic acquisition technology based on XDP

作　　者：储苏红 刘磊[1,2] CHU Suhong;LIU Lei(National Network New Media Engineering Research Center,Institute of Acoustics,Chinese Academy of Sciences,Beijing 100190,China;University of Chinese Academy of Sciences,Beijing 100049,China)

机构地区：[1]中国科学院声学研究所国家网络新媒体工程技术研究中心,北京100190 [2]中国科学院大学,北京100049

出　　处：《电子设计工程》2023年第4期21-27,共7页Electronic Design Engineering

基　　金：中国科学院战略性科技先导专项课题(XDC02070100)。

摘　　要：为了更好地适应网络回溯分析系统对高速网络下数据包捕获的要求,研究了基于eXpress Data Path(XDP)的高性能流量采集技术。通过使用零拷贝套接字AF_XDP旁路内核协议栈,直接将数据包从内核空间传输到用户空间,有效减少了用户空间和内核空间频繁上下文切换带来的系统开销,提高了数据包捕获性能。在Linux平台上,基于XDP技术实现了数据包的捕获功能,并与基于Intel Data Plane Development Kit (DPDK)的流量采集方式进行实验对比。实验结果表明,XDP满足DPDK的流量采集性能要求,并且具有独立于硬件设备的优势。To keep up with the demands of precision packet capture on high-speed networks in network retrospective analysis system,a high-performance traffic acquisition technology based on eXpress Data Path(XDP) is studied. The zero-copy socket AF_XDP is used to bypass the kernel protocol stack,directly passing network traffic from the driver in the kernel up to userspace. Effectively reduce the system overhead caused by constant context switches between user space and kernel space,and improve the performance of packet capture. The packet processing functionality is implemented based on XDP in Linux,and the performance tests are designed to compare it with packet capture mechanism based on Intel Date Plane Development Kit(DPDK). The experimental results show that XDP can reach the high-performance level of DPDK,and has the advantage of that no special hardware features are needed.

关 键 词：高性能数据包捕获 XDP技术 零拷贝 AF_XDP DPDK技术 

分 类 号：TN915[电子电信—通信与信息系统]