Multi-tenant public cloud tenants nowadays have the increasing demand for cryptographic service to secure their applications. Virtio-Crypto device proposed to the community as a cloud-friendly virtual device, lacks a high-performance acceleration method in both frontend and backend.
To solve this challenge, we propose an all-inclusive Virtio-Crypto acceleration solution based on DPDK and DPDK Cryptodev Framework. The solution is composed of a backend DPDK vhost-crypto extension as well as a frontend DPDK Virtio crypto PMD. We will present this solution in detail including the utilization of the techniques such as burst-operation, polling mode Virtio queue access, zero-copy, and DPDK Cryptodev Framework including scheduler PMD, and the significant performance gain achieved. We will also describe the possible use cases this solution may help achieve in the cloud-based crypto applications.
Xin Zeng is a software engineer of Network Platform Group at Intel Data Center Group. He is now working on virtualization projects for Intel QuickAssist Technology product. Intel QuickAssist Technology can be used to handle compute-intensive security and compression operations that... Read More →
