LinuxCon ContainerCon CloudOpen China

A key aspect of providing secure and reliable cloud services is to protect their control and data plane traffic secured. However, nowadays it is not easy to protect network flows due to the increased network throughput, the faster rate of application development, and more and more complex network applications. In this work presented here we propose the DPDK Crypto Library, a framework for processing crypto workloads in DPDK, to make use of and unify Intel® Performance Library and Intel® QuickAssist Technology to accelerate crypto operations. The DPDK Crypto Library provides crypto poll mode drivers as well as a standard API that supports all these PMDs and can be used to perform various cipher, authentication, and AEAD symmetric crypto operations in DPDK. The library is also provided the feature for effortless migrating between physical hardware and visualized software.