Nftables Load Balancing 10x faster than LVS

Posted by Zevenet | 17 October, 2016 | Technical

These two pages were the beginning of Load Balancing with nftables project, developed between Pablo Neira (Netfilter Core Team) and Laura García (Zen Load Balancer Team) and presented at the last Netdev 1.2 Conference in Tokyo along with its benchmarks where were proved that nftables from ingress reaches a performance almost 10 times faster than LVS.

nftables_notes

We mainly have implemented two new expressions to the nft infrastructure in order to provide load balancing properties: nft_numgen, with 2 main operations incremental to perform round robin connections scheduling and random to create weighted scheduling, and nft_hash to provide persistence according to an input register.

Through the prerouting and postrouting hooks, we can implement source NAT and destination NAT topologies, meanwhile LVS only allows sNAT. Also, Direct Server Return topology could be performed via ingress, which is a very early stage of an incoming packet so the performance is much better. Here we display some benchmarks presented for IPv4 with HTTP flows:

nftables_bench_ipv4

As it’s shown in the graph above, NAT topologies between nftables and LVS have no much difference in performance, meanwhile DSR topology in nftables could perform almost 10x faster than LVS.

With IPv6 we got similar results to IPV4 but the number of HTTP requests per seconds has been improved in general for all cases. Load Balancing with nftables from ingress can reach more than 430 thousands of HTTP requests per seconds with less than 1% of CPU and almost 6x faster than LVS.

nftables_bench_ipv6

This talk was part of the nftables workshop.

CHECK OUR NETDEV TALKS PAPERS
Or check out the full presentation.

This is just the beginning, follow our development, it will be the future of Zevenet LB core.

SHARE ON:

Related Blogs

Posted by zenweb | 13 November 2018
This week, a new article is available in the howto section of the Knowledge Base. FileCloud enables a private cloud that makes your files accessible from any device from anywhere,…
3 LikesComments Off on FileCloud load balancing article
Posted by zenweb | 02 August 2018
Following our Microsoft technical articles series, we've published how to load balance NTLM authentication based web applications dedicated to layer 4 but also layer 7 advanced options. Firstly, we explain…
13 LikesComments Off on Load Balancing NTLM authentication and ASP.NET impersonation is easy!
Posted by zenweb | 07 June 2018
User experience doesn't have to be a limitation to access to high technology. For that reason at Zevenet we take care usability and management easiness to provide cutting edge networking…
13 LikesComments Off on Looking Forward to Zevenet EE 5.2: state-of-the-art of Application Delivery UX