/plushcap/analysis/cloudflare/why-we-use-the-linux-kernels-tcp-stack

Why we use the Linux kernel's TCP stack

What's this blog post about?

The use of the Linux kernel's TCP stack is a subject of interest due to its ability to handle multiple network applications and provide hardware independence and easy-to-use APIs. However, some argue for using a userspace network stack for better performance and lower latency. At CloudFlare, they use a "partial kernel bypass" technique to offload their anti-DDoS iptables to a very fast userspace process, saving Linux from processing attack packets and avoiding IRQ storms situations. Despite the potential benefits of kernel bypass, it is unlikely to become mainstream due to the lack of stable open-source partial kernel bypass technology and the rich ecosystem provided by the Linux TCP stack.

Company
Cloudflare

Date published
July 7, 2016

Author(s)
Marek Majkowski

Word count
1318

Hacker News points
None found.

Language
English


By Matt Makai. 2021-2024.