Nftables Load Balancing 10x faster than LVS

Posted by Zevenet | 17 October, 2016 | Technical

These two pages were the beginning of Load Balancing with nftables project, developed between Pablo Neira (Netfilter Core Team) and Laura García (Zen Load Balancer Team) and presented at the last Netdev 1.2 Conference in Tokyo along with its benchmarks where were proved that nftables from ingress reaches a performance almost 10 times faster than LVS .

nftables_notes

We mainly have implemented two new expressions to the nft infrastructure in order to provide load balancing properties: nft_numgen, with 2 main operations incremental to perform round robin connections scheduling and random to create weighted scheduling, and nft_hash to provide persistence according to an input register.

Through the prerouting and postrouting hooks, we can implement source NAT and destination NAT topologies, meanwhile LVS only allows sNAT. Also, Direct Server Return topology could be performed via ingress, which is a very early stage of an incoming packet so the performance is much better. Here we display some benchmarks presented for IPv4 with HTTP flows:

nftables_bench_ipv4

As it’s shown in the graph above, NAT topologies between nftables and LVS have no much difference in performance, meanwhile DSR topology in nftables could perform almost 10x faster than LVS.

With IPv6 we got similar results to IPV4 but the number of HTTP requests per seconds has been improved in general for all cases. Load Balancing with nftables from ingress can reach more than 430 thousands of HTTP requests per seconds with less than 1% of CPU and almost 6x faster than LVS.

nftables_bench_ipv6

This talk was part of the nftables workshop. Check out the full presentation.

This is just the beginning, follow our development, it will be the future of Zen Load Balancer cores.

SHARE ON:

Related Blogs

Posted by zenweb | 18 April 2017
Netdev Conf is a community-driven conference dedicated to technical Linux networking where the most important and relevant contributors, maintainers and open source supported companies meet together to present the brand…
Posted by zenweb | 10 October 2016
In this post we're going to highlight the most important topics and discussions addressed in Netdev 1.2 in Tokyo the last 5th-7th of October to create the networking evolution in…
Zen-load-balancer-Security-advisory
Posted by zenweb | 20 September 2016
At Zen Load Balancer we are up to date with the latest security alerts and for ensuring the right functionality of our services and the security of our users, we…