Network

Harnessing Hardware for High-Performance Traffic Management in FD.io/VPP

<h1>Harnessing Hardware for High-Performance Traffic Management in VPP</h1> <p><strong>Traffic Management (TM)</strong> is critical for predictable network performance. It controls packet priority, shapes transmission rates, and allocates bandwidth to meet SLAs in large-scale deployments such as ISPs, telecom networks, and data centers.</p> <p><strong>FD.io Vector Packet Processing (VPP)</strong>, a widely adopted high-performance networking stack across these environments, currently relies on <strong>software-based TM</strong>. This introduces bottlenecks at scale: CPU overhead grows with traffic classes, latency spikes under load, and token bucket waste cycles. At 100G/200G and beyond, these limitations pose a critical risk of <strong>SLA violations</strong>. </p> <p>The new TM framework addresses these challenges by <strong>offloading shaping and scheduling to hardware</strong> through a <strong>vendor-neutral</strong> architecture and a <strong>unified API</strong> that works across all platforms supporting traffic management in silicon. </p> <h2>Overview</h2> <p>The proposed TM framework integrates VPP with hardware traffic management engines in supported NICs, SmartNICs, and DPUs. It detects hardware capabilities, classifies flows in software, and steers them to hardware queues where TM policies are enforced at line rate—eliminating software-based per-packet arbitration.</p> <h2>Key Features</h2> <p><strong>Hierarchical Scheduling:</strong> Organizes traffic into multi-level queues to prioritize critical services while preserving fairness across remaining traffic. <strong>Dual-Rate Shaping:</strong> Applies committed and peak rate control with burst handling, compliant with RFC 2698, to prevent congestion and maintain predictable performance. <strong>Priority and Fairness:</strong> Combines strict priority for latency-sensitive traffic with weighted sharing for bulk flows to balance resources. <strong>Policing:</strong> Enforces traffic limits at line rate by dropping or marking packets appropriately.</p> <h2>Advantages of Traffic Management in Hardware</h2> <p><strong>Performance:</strong> Delivers line-rate Traffic Management with high accuracy and low latency. <strong>Scalability:</strong> Supports thousands of queues at line rates without proportional CPU costs. <strong>Efficiency:</strong> Shifts workload to hardware, enabling CPUs to focus on application logic while reducing energy usage <strong>Reliability:</strong> Ensures stable Quality of Service under peak load conditions. </p> <h2>Conclusion</h2> <p>Hardware-assisted TM is no longer optional—it is mission-critical for networks scaling toward 400G/800G with diverse traffic and tight latency budgets. The VPP TM framework delivers this through a vendor-neutral API, <strong>making VPP ready for demanding telecom and data center workloads</strong> while preserving its modular design. For open-source stacks like VPP, this is not just an enhancement—it’s a long-overdue capability.</p>

Additional information

Live Stream https://live.fosdem.org/watch/h1302
Type devroom
Language English

More sessions

1/31/26
Network
Oskar Mansfeld
H.1302 (Depage)
<p>This talk gives a rundown of various potential improvements being thought about and experimented on for the CUBIC Congestion Control implementation in Neqo, Firefox's QUIC stack. Detecting and recovering from Spurious Congestion Events -- network hiccups mistaken as congestion signal. Reacting differently to Explicit Congestion Notifications (ECN) than to packet loss. Optimizing the Slow Start exit point to avoid unnecessary loss through various heuristics.</p> <p>While many of these make ...
1/31/26
Network
Floris Bruynooghe
H.1302 (Depage)
<p>iroh is a library to establish peer-to-peer QUIC connections assisted by relay servers. It needs to route UDP datagrams carrying QUIC payloads over relayed and holepunched network paths. While this used to be done outside of QUIC's knowledge, over the past year we have worked to adopt the QUIC multipath proposed standard so that QUIC itself is aware of multiple paths.</p> <p>This talk will cover iroh's experience of adding QUIC multipath to the Quinn library and the challenges of adopting it. ...
1/31/26
Network
H.1302 (Depage)
<p>The Web’s transport stack is changing rapidly, with QUIC, HTTP/3, and encrypted DNS seeing broad adoption. This talk gives an overview of the modern network protocols Firefox already deploys and invests in, including QUIC and HTTP/3’s growing share of Web traffic. It will highlight what Firefox actually sends on the wire today, what benefits we observe in practice, and where the Web’s protocol landscape stands in early 2026.</p> <p>The session will also offer an outlook on what’s ...
1/31/26
Network
Antonio Jimenez
H.1302 (Depage)
<p>Have you heard about HTTP Archive (HAR) files and wondered how you could leverage this data for deeper insights into your web applications? </p> <p>Imagine analyzing your page load request data as <a href="https://opentelemetry.io/">OpenTelemetry</a> traces in your favorite observability backend. This talk will explore the lessons learned from transforming HAR into an OpenTelemetry trace and streaming it to <a href="https://www.jaegertracing.io/">Jaeger</a>. Learn how to convert HAR data into ...
1/31/26
Network
H.1302 (Depage)
<p>Suricata is a high performance, open source network analysis and threat detection software used by most private and public organizations, and embedded by major vendors to protect their assets. Suricata provides network protocol, flow, alert, anomaly logs, file extraction and PCAP capture at very high speeds and provides a wide range of deployment options - IDS/IPS/FW/NSM.</p> <p>Suricata 8 is the latest stable edition that has been in development for 2 years, powered by collaborative work of ...
1/31/26
Network
Shereen Bellamy
H.1302 (Depage)
<p>Everyone's building MCP servers for network automation. Your agents can finally talk to each other and share context about your infrastructure. But what context are they actually sharing?</p> <p>If your agent's understanding of the network comes from vector embeddings and RAG, MCP is just helping you share incomplete topology understanding and missed policy dependencies faster. Vector similarity can't represent "which devices are upstream of this link" or "what routing policies affect this ...
1/31/26
Network
Alfonso Sandoval Rosas
H.1302 (Depage)
<p>Network operations still depend heavily on manual workflows. Engineers move between CLIs, dashboards, and scripts to answer operational questions, validate configurations, and enforce compliance across diverse network platforms. These tasks are repetitive, error-prone, and hard to scale.</p> <p>This talk presents a practical AgenticOps architecture for network operations built with open source tools. It shows how low-code visual orchestration can be combined with LLM-based reasoning to ...