信息安全研究 ›› 2018, Vol. 4 ›› Issue (1): 53-62.

• 自主可控专题 • 上一篇    下一篇

DPDK在国产申威处理器平台上的应用与研究

明旭,何慧文,陈磊   

  1. 北京中科网威信息技术有限公司
  • 收稿日期:2018-01-14 出版日期:2018-01-15 发布日期:2018-01-13
  • 通讯作者: 明旭
  • 作者简介:明旭:北京中科网威信息技术有限公司副董事长,主要研究方向为网络攻击与防护、自主可控芯片的安全性研究。 何慧文:北京中科网威信息技术有限公司保密办主任,主要研究方向为高性能计算、网络安全。 陈磊:北京中科网威信息技术有限公司网络安全技术研究院副院长,主要研究方向为网络攻击与防护、自主可控芯片的安全性研究。

Application And Research Of DPDK On Domestic SW Processor Platform

  • Received:2018-01-14 Online:2018-01-15 Published:2018-01-13

摘要: 展自主可控处理器,对我国新时代中国特色社会主义的建设具有重大的战略意义。经过十多年的发展,国产申威处理器在超算等领域取得了举世瞩目的成就,已经基本具备了与当今国际先进处理器相抗衡的能力。DPDK是intel提供的数据平面开发工具集,由一系列功能库、网卡驱动组成,开发者可以利用这些库进行二次开发,实现网络数据包的快速处理。基于DPDK实现用户态网络协议栈,且用户态协议栈可以避免中断,避免不必要的上下文切换,可以作到真正的zero-copy,在云计算,大数据场景下越发重要。DPDK正在SDN和NFV中发挥越来越重要的作用,并逐渐成为事实上的标准。将DPDK移植到国产申威处理器硬件的平台上,不仅可以大幅提升基于申威平台的网络设备的数据包处理能力,还可以拓宽申威硬件平台在高性能计算、大数据平台、安全设备、以及服务器领域的应用。 本文首先阐述了将DPDK移植到国产申威处理器平台上的重要意义,并简述了DPDK的架构和核心技术;然后分析了将DPDK移植到申威处理器平台上的难点、描述了移植工作的具体技术实现;最后,简述了基于申威SW411处理器的防火墙原型机的设计与实现工作,并通过对比移植前后原型机的关键性能指标,验证了DPDK移植到申威平台上能够达到的效果。

关键词: DPDK, 申威处理器, 移植, 框架, 协议栈

Abstract: The development of autonomous controllable processors is of great strategic significance to the construction of socialism with Chinese characteristics in a new era in our country. After more than a decade of development, China-made Shenwei processors have made remarkable achievements in supercomputer and other fields and have basically got the ability to contend with today's advanced international processors.DPDK is a set of data plane development tools provided by intel, which is composed of a series of function libraries and network card drivers. Developers can use these libraries for secondary development to quickly process network data packets. Based on the DPDK, the user-mode network protocol stack is implemented, and the user-mode protocol stack avoids interruptions and avoids unnecessary context switching, making a true zero-copy and becoming more and more important in cloud computing and big data scenarios. DPDK is playing an increasingly important role in SDN and NFV and has gradually become the de facto standard. The DPDK transplant to the domestic Shen Wei processor hardware platform, not only can significantly improve Shen Wei platform based network equipment packet processing capabilities, but also can be extended Shen Wei hardware platform in high performance computing, big data platforms, security equipment, As well as the server field application. This paper firstly expounds the significance of DPDK porting to domestic Shen Wei processor platform, and briefly describes the architecture and core technologies of DPDK. Then it analyzes the difficulties of porting DPDK to SW processor platform, and describes the migration work Finally, the article briefly describes the design and implementation of the SW411 processor-based firewall prototype and compares the performance of the prototype before and after migration to verify that the DPDK can be ported to the Shen Wei platform effect.

Key words: DPDK, SW Processor, Transplant, Framework, Protocol Stack