In this talk, I will discuss the efforts to serve TLS encrypted Netflix video at 400Gb/s from a single server. This will be a follow-on to 2 talks at the 2019 EuroBSDCon: “Numa Optimizations in the FreeBSD Network Stack” and “Kernel TLS and TLS Hardware Offload“. I will provide background on the Netflix video workload, and define key technologies such as NUMA, kernel TLS and hardware kTLS.

I will describe encountering bottlenecks such as:
- Memory bandwidth limits for software kTLS
- PCIe issues with hardware kTLS
- NUMA for software vs hardware kTLS

I will present current and historical performance results from at least:
- AMD “Rome” 2nd generation EPYC systems
- AMD “Milan” 3rd generation EPYC systems
- Ampere Altra arm64 systems

Drew Gallatin
Drew started working on FreeBSD at Duke in the 90s, and was one of the people behind the FreeBSD/alpha port. He worked on zero-copy TCP optimizations for FreeBSD and was sending data at over 1Gb/s before gigabit Ethernet was generally available. He spent a decade at…