The document discusses a cluster-wide label ID table that allows for efficient policy enforcement across frontend, backend, and load balancer systems. A single hash table lookup is needed regardless of policy complexity thanks to an ID carried in network packets. Benchmark results show the approach can efficiently handle everything from small HTTP requests to ultra HD videos even with 10,000 policies on a 24-core server.

2. ○
○
○
○
○

5. ●
○
○
⇒
⇒
●
●

6. ●
○
○
●
○
●
○

7. ●
●
○
○
Frontend BackendLB
FE BE
LB
LB
FE
FE BE
LB

8. ●
●
○
○
Frontend BackendLB
FE BE
LB
LB
FE
FE BE
LB
Prod
Frontend BackendLB
FE BELB
QA
Prod
QA
Prodrequires
requires QA
QA

9. ●
○
FE
BE
LB Prod
QA
Prod
Prod
FE
BE
LB
QA
QA
10
11
12
13
14
15
16
Cluster Wide Label ID Table: This ID is carried in the network packet and used
to reconstruct the label context at the receiving
host.
Policy enforcement cost is reduced to a
single hashtable lookup regardless of
complexity.

10. ●
○
●
○
○
●

11. ●
●
●
FE
BE
LB
LB
ECMP
FE
FE
BE
BE
BE
Small HTTP GET
Ultra HD Cat Pictures/Videos

12. Intel Xeon 3.5Ghz Sandy Bridge, 24 cores,
1 TCP flow per core, netperf -t TCP_SENDFILE, 10’000 policies

15. ●
●
●
●
●
●
●
●
●
●
●
●
●