Denys Haryachyy

I write custom data-plane plugins for VPP, and I wanted a proper CPU profile of one — a flame graph that shows which function in my classifier is actually eating the core.

wireblast v0.5.0 lifts AF_XDP packet generation 25–42% on the same hardware — from ~78 to ~98 Mpps at 64 bytes.

wireblast vs TRex on the same 200 G ConnectX-7 and cores: the Go/AF_XDP generator reaches ~73.6 Mpps at 64 bytes, about 44% of the 168.8 Mpps TRex’s DPDK path hits on identical hardware.

Mixed-protocol floods collapse a ConnectX's receive rate.

A single extra L4 protocol collapses a 100 GbE ConnectX from line rate to ~20% receive — same frame size, same rate.

Simulate volumetric DDoS attacks with TRex at 100GbE line rate (142 Mpps): UDP, SYN, ACK, ICMP, and IP-fragment floods with spoofed source IPs.

TL;DR.

TL;DR.

Building a three-node VPP lab the declarative way with Containerlab: two Alpine endpoints and a VPP router that binds the veths via af_packet, forwards between two subnets, and drops a destination with a blackhole route.

TL;DR.

Generate 100GbE line-rate traffic (142 Mpps) with TRex 3.06 on a Mellanox ConnectX-5: hardware, the frame-size math, config, streams, and tuning.

TL;DR.

GNS3 turns your laptop into a full network lab: real router software, real links, real packets — no hardware.

How a VPP software data plane drops packets at 140 Mpps: a flow cache + tuple-space search, the per-packet cycle budget, and why the NIC ring — not the CPU — is the ceiling.

How VPP's bihash works: buckets, pages and KVPs, lock-free lookups with no reader locks, collision-driven page growth, and how to size it (bihash_48_8).

Why a DPDK poll-mode app drops packets at 100GbE and how to stop it: pinning NIC IRQs off the worker cores, plus isolcpus, nohz_full and rcu_nocbs.

Enable and tune CQE compression on the Mellanox ConnectX-5 (DPDK 25.07): the completion-queue mechanics that let a 64-core EPYC 7742 absorb 142 Mpps at 100GbE.

Learn how to write a BPF program that offloads packet rewriting from a DPDK AF_XDP application to the kernel XDP hook.

When VPP handles IPsec dataplane traffic, it maintains its own per-SA byte and packet counters internally.

Transform your VPP CLI experience with vppctl-ai!

Unleash the power of high-performance networking with VPP's XFRM plugin.

Unleash the power of real-time speech processing with whisper.cpp!

Unleash the power of DPDK and VPP for efficient networking!

Discover the power of VPP and TAP scaling in this benchmarking experiment.

Automate PPPoE session creation in VPP with ease!

Explore how to bypass IKEv2 NAT-T using IPsec policy with VPP & enhance your networking skills.

Discover the benefits of VPP and DPDK in networking.

Explore IPsec policy in transport mode with VPP.

Learn how to fix IPSEC traffic drops between Strongswan server and VPP using DPDK and VPP.

Learn how to debug Strongswan server with GDB in this comprehensive guide.

Learn how to decrypt IKE traffic in Strongswan using IKEv2.

Learn how to build DPDK with debug symbols for VPP version 23.02 to enhance networking capabilities.

Explore the benefits of running two VPP instances in separate namespaces for enhanced networking capabilities.

Learn how to set up an IPsec connection using IKEv2 with VPP 20.05.

Uncover the intricacies of enabling OSPF on VPP router with FRR and delve into the seamless integration of VPP's router plugin and Linux network stack.

Learn how to set up Network Address Translation (NAT) in VPP for Internet access.

Explore ABF (ACL Based Forwarding) in VPP: maximizing control over forwarding with ACL rules instead of IP destination address lookups.

Discover the power of VPP's Python API in this informative guide.

Discover how to set up a secure IPsec GRE tunnel on VxLAN in this VPP networking tutorial.

Learn how to effectively utilize the ACL plugin in VPP for traffic classification using L3/L4 header fields.

Learn how to set up and use TRex, a powerful traffic generator based on DPDK for efficient networking performance.

Discover how to implement VxLAN over IPsec in VPP to create a secure layer-2 tunnel.

Learn how to trace packets in VPP with Wireshark, a powerful debugging tool for investigating network traffic issues efficiently.

Learn how to set up a VXLAN tunnel in VPP networking, an L2 overlay over L3 networks using UDP.

Unlock the potential of DPDK with huge pages for improved networking performance.

Learn how to capture 10Gbps traffic into Apache Kafka using DPDK, with IP filtering & hardware details.

Explore the advanced networking concept of Symmetric RSS in DPDK/VPP for efficient packet processing.

Learn how to provide internet access for a network namespace using VPP.

Explore how to implement a flow table in VPP for efficient TCP connection tracking with bidirectional hash tables and a timer wheel.

Learn how to trace packets in VPP with this comprehensive guide.