Encryption on DPU

Mr Swe Aung1, Dr Shahaan Ayyub1

1Monash University, Clayton, Australia

DPUs(Data Processing Unit) are specialised programmable Network Interface Cards (NICs) that are capable of offloading both data and control plane processing from the server. A DPU brings an Operating System as well as Acelerated Virtual Switching (ASAP2) in the NIC hardware to the HPC / Cloud builders. Therefore, applications that require OS level libraries (e.g libc, libibverb) can be executed on the DPUs’ OS and their data plane computational overheads can be offloaded to the DPUs’ hardware. This capability relinquishes CPU cycles for  executing applications in domains such as security (microsegmentation, end-point protection, virtualised firewall, encryption), SDN (Software-Defined-Networking), etc. We will share some of our experiences with seamless encryption tunnelling between two user VMs. In our setup, ipsec tunneling and encryption applications run under the hood on the DPU attached to the hypervisors with no additional configuration required at the VMs.


Biography:

Swe Aung

Swe Win Aung has been working for Monash eResearch Centre for over 10 years. Swe delivers computing resources to researchers and provides innovative computing and storage infrastructures which underpins various research platforms in Monash such as Research Cloud, HPC, ASPREE, SeRP, ACEMID, Bioinformatics and etc.

Dr. Shahaan Ayyub

Dr.Shahaan Ayyub has more than 6 years of experience in developing and operating Nectar Cloud infrastructure, including architecting bespoke PaaS solutions for researchers. He has also worked for 4 years on developing and administering a Hybrid High-Performance Computing platform. His PhD thesis involved developing computational models, scheduling algorithms and simulators for distributed (Grid Computing) platforms.

 

Categories