Hardware-assisted Isolation in a Multi-tenant Function-based Dataplane
Wei Zhang, Abhigyan Sharma, Kaustubh Joshi, Timothy Wood · 2018
Existing software dataplanes that run network functions inside VMs or containers can provide either performance (by dedicating CPU cores) or multiplexing (by context switching), but not both at once. Function-based dataplane architectures by replacing VMs and containers with function calls promise to achieve multiplexing and performance at the same time. However, they compromise memory isolation between tenants by forcing them to use a shared memory address space.