Firewall-as-a-Service Accelerated with DPDK
Build a cloud firewall service with DPDK: session tables, stateful inspection, NAT, DDoS defence and control planes.
Advanced30 lessons
written lessons≈ 15 h
High-Performance Networking & Cloud-Native · 30 illustrated lessons (text/HTML)
Outcomes
- Implement stateful firewalling and NAT on DPDK
- Design the control plane and monitoring for a firewall service
- Tune a DPDK data plane to line rate
Where we teach this
The lessons
Every lesson in this curriculum, in the order we teach it.
- 1Introduction: FWaaS and DPDK
- 2The evolution of firewalls: from hardware appliances to cloud-native FWaaS
- 3DPDK technology in depth
- 4Setting up a DPDK development environment
- 5The DPDK basic programming model explained
- 6FWaaS architecture design, part 1
- 7FWaaS architecture design, part 2
- 8DPDK packet-processing basics
- 9Basic forwarding with DPDK
- 10FWaaS data-plane core: session table design
- 11Implementing ACLs (access control lists)
- 12Stateful firewall principles
- 13Stateful inspection with DPDK
- 14NAT explained
- 15High-performance NAT with DPDK
- 16Encryption and decryption integration overview
- 17Load balancing and traffic distribution
- 18FWaaS integration with virtualisation and container platforms in practice
- 19DPDK performance tuning, part 1
- 20DPDK performance tuning, part 2
- 21DPDK performance tuning, part 3
- 22FWaaS control-plane implementation
- 23Monitoring and observability: FWaaS data-plane monitoring in practice
- 24Security enhancement: DDoS defence and threat-intelligence integration in FWaaS
- 25Test strategy and methodology
- 26Production deployment considerations
- 27Troubleshooting and diagnosis: DPDK debugging tools and performance analysis
- 28Open-source ecosystem and community
- 29Outlook: next-generation acceleration engines for FWaaS
- 30Capstone: building a mini enterprise-grade FWaaS system
All-access library
Every curriculum on this page, with the labs and lab sequences, for a year.