FD.io Mini-Summit at KubeCon + CloudNativeCon North America 2018

TLS is fast becoming a critical workload in Cloud Native. How do we offload cryptography to hardware without any change in application are now critical industry questions?

This presentation will show a "transparent" and "asynchronous" high-performance solution that addresses the above issues.

"Transparent": Extending cloud native apps to integrate with FD.io VPP accelerated TCP stack in userspace. The TLS layer in VPP is viewed as just one of a number of transport layers to the supporting application, providing applications the ability to integrate with the TLS layer transparently.

"Asynchronous": Extend existing OpenSSL "file descriptor" asynchronous mechanism to an efficient and generic new interface, thus TLS host stack flow in VPP and the hardware cryptography flow can be pipeline simultaneously without user/kernel space switch which maximizes both the CPU and hardware utilization.