Сетевая карта 2 порта 1000Base-X/10GBase-X (SFP+, Intel 82599ES), Silicom PE210G2SPi9A-XR

DNA (Direct NIC Access) это уникальная сетевая технология для сетевых карт Silicom 1 Gigabit (e1000e-based, igb-based) and 10 Gigabit (82598/99-based), которая дает беспрецедентную скорость обработки пакетов, позволяя приложениям (например мониторинга или DPI) получать пакеты минуя ядро Linux, непосредственно из сетевого адаптера (no-Linux kernel interaction).

Благодаря этой технологии циклы процессора расходуются слабо, даже при достижении максимальной скорости адаптера.

DNA и Libzero драйвер лицензируется отдельно.

Typical packet capture performance on a low-end Xeon server (X3450) with DNA-aware 10 Gigabit driver exceed 11 million packets/sec (Silicom 10 Gigabit 82598/99 adapters, 64 bytes packet size), that is almost 200% speedup with respect to TNAPI and close to the theoretical maximum ethernet speed. DNA drivers can be exploited only by PF_RING-based applications and due to its kernel-bypass architecture, not all typical PF_RING features are available to applications.

Zero-copy flexible packet processing on top of DNA 

PF_RING DNA is a Linux software framework that implements 0% CPU receive/transmission on commodity 1/10 Gbit network adapters. While being able to operate at line rate with any packet size, it implemented basic RX/TX capabilities that are enough for most but not all applications. Furthermore it inherited hardware limitations such as inflexible packet distribution due to the mechanism,named RSS, used in network adapters.

libzero fills the gap, by providing developers a flexible packet processing framework on top of DNA, that implements in zero-copy:

• Packet distribution across threads and processes.
• Flexible, user-configurable, packet hashing for flexible packet distribution.
• Packet filtering (on top of hardware packets filter).
• Efficient packet forwarding across network interfaces.

All this with no drawbacks, as you can read below on this article, libzero does not introduce performance penalties so that you can still operate al line-rate any packet size.