High Performance and Scalable NAT System on Commodity Platforms

TL;DR

This paper presents Quick NAT, a high-performance, scalable NAT system for commodity servers that employs hash-based search, parallel processing, lock-free data structures, and zero-copy techniques to achieve high throughput and low latency.

Contribution

The paper introduces Quick NAT, a novel NAT system that significantly improves performance and scalability on commodity hardware through innovative algorithms and data structures.

Findings

Achieves line-rate throughput on commodity servers

Reduces NAT lookup latency with hash search algorithm

Demonstrates high scalability and performance

Abstract

Quick network address translation (NAT) is proposed to improve the network performance of the NAT system on the commodity server by three ways. First, the quick NAT search algorithm is designed to use the Hash search instead of the sequential search to reduce latency when looking up the NAT rule table. Second, to leverage the power of the multi-core central processing unit (CPU) and the multi-queue network interface card, Quick NAT enables multiple CPU cores to process in parallel. The localized connection tracking table and the compare-and-swap based lock-free NAT Hash tables are designed to eliminate the lock overhead. Third, Quick NAT uses the polling and zero-copy delivery to reduce the cost of interrupt and packet copies. The evaluation results show that Quick NAT obtains high scalability and line-rate throughput on the commodity server.