Benoît Ganne

We will show how to leverage VPP, wgsd and WireGuard to build a dynamic, fast and secure overlay network to interconnect service nodes wherever they are: on-prem, in public clouds or behind NATs.

VPP is one of the fastest and versatile open-source networking dataplane running on general purpose CPU, implementing network services such as routing, bridging, ACLs, cryptography and more.

wgsd is an open source project maintained by Jordan Whited implementing DNS Service Discovery for Wireguard endpoints and automatically interconnecting them through a mesh of Wireguard tunnels.

WireGuard is a new VPN technology created by Jason A. Donenfeld that is getting popular thanks to its simplicity.

While userspace networking has demonstrated great performance benefits, it does come with greater complexity than kernel networking.

In parallel, Remote Direct Memory Access (RDMA) was developed as an efficient way to move data in HPC and storage clusters with great success.

Key properties of this technology are also highly desirable for userspace networking: native integration with the operating system (OS), OS bypass and a very efficient software interface. RDMA-capable network adapters are now enabling standard Ethernet networking functions through the RDMA interface, allowing userspace networking software such as VPP to achieve extreme performance while integrating transparently with the OS.

We'll present:

• the RDMA Ethernet concepts, architecture and interfaces
• how VPP leverages it
• the problems solved by this architecture and the usecase it enables