ocaml-rss/test/ at main · gazagnaire.org/ocaml-rss · Tangled

gazagnaire.org / ocaml-rss

0

Receive Side Scaling: the Toeplitz flow hash and per-owner steering

0

ocaml-rss / test

4 files

at main

Thomas Gazagnaire rss: cover IPv6 flows and document the key predictability tradeoff 4d ago

rss: cover IPv6 flows and document the key predictability tradeoff The hash already handles IPv6 (a 36-byte tuple); pin it with a unit test and a fuzz property (symmetric both directions, asymmetric directional, owner in range). Document that symmetry comes from ordering the endpoints, not the key, so a per-process random key defends against an attacker steering a chosen flow onto one owner -- the default key is the fixed public hardware key.

4 days ago

rss: new package for the RSS Toeplitz flow hash and steering Flow-to-owner steering is currently entangled in Tcp.Shard, so anything else that wants it (the firewall's sharded NAT) would drag in the whole TCP stack. Factor the concern into a dependency-light package (ipaddr only) that the TCP stack and the firewall both consume: the Toeplitz hash (Microsoft RSS / Intel 82599, verified against the canonical verification vectors) exposed asymmetric and symmetric, an owner reduction, and the RFC 6335 dynamic-port lanes that keep a flow's return traffic on its owner. The opam name is nox-rss because rss is the RSS-feed library.

4 days ago

rss: cover IPv6 flows and document the key predictability tradeoff The hash already handles IPv6 (a 36-byte tuple); pin it with a unit test and a fuzz property (symmetric both directions, asymmetric directional, owner in range). Document that symmetry comes from ordering the endpoints, not the key, so a per-process random key defends against an attacker steering a chosen flow onto one owner -- the default key is the fixed public hardware key.

4 days ago

rss: new package for the RSS Toeplitz flow hash and steering Flow-to-owner steering is currently entangled in Tcp.Shard, so anything else that wants it (the firewall's sharded NAT) would drag in the whole TCP stack. Factor the concern into a dependency-light package (ipaddr only) that the TCP stack and the firewall both consume: the Toeplitz hash (Microsoft RSS / Intel 82599, verified against the canonical verification vectors) exposed asymmetric and symmetric, an owner reduction, and the RFC 6335 dynamic-port lanes that keep a flow's return traffic on its owner. The opam name is nox-rss because rss is the RSS-feed library.

4 days ago