LinuxCon + CloudOpen + ContainerCon NA 2015

Although the light-weight container infrastructure provides VNFs (Virtual Network Function) with high density and efficiency, we have challenges when building high-performance NFV solutions using containers. In our view, two are outstanding there: 1) network configuration, especially with SR-IOV, and 2) performance isolation to guarantee deterministic execution with minimal latency and jitters.

In this present, we will share best practices and our solutions to those challenges. We will 1) talk about network configuration options for SR-IOV, performance, and security, and 2) discuss real-time requirements, cgroups, real-time containers, and soft partitioning to achieve deterministic execution for data plane VNF containers. We will also touch on container/hypervisor coexistence, including our KVM enhancements for NFV, some of which are applicable to containers as well.