Open Networking Summit 2017

IO Visor Project is a Linux Foundation project driving in-kernel data path that is fully programmable at runtime. Using eBPF (extended Berkeley Packet Filters) and XDP (eXpress Data Plane),  the community has upstreamed functions since kernel version 3.18.  eBPF and XDP provide in-kernel functions that enable runtime programmable data path  which can be leveraged for SDN, security, tracing, analytics, and monitoring. eBPF provides many capabilities by introducing dynamic, safe, low-overhead, efficient IO programs that run in real-time kernel without recompiling or rebooting the kernel. XDP which leverages eBPF, performs pre-stack packet processing functions in kernel space providing high performance forwarding with minimal impact to CPU utilization. Join this talk to learn how IO Visor works and an overview of use cases for SDN and NFV such as running VNFs in kernel, running SDN on CPU-agnostic platforms, pre-stack processing for filtering DDoS attacks, flow sampling, monitoring and analytics just to name a few.