| _version_ | 1866901396347944960 |
|---|---|
| author | Satya Sagar Reddi |
| author_facet | Satya Sagar Reddi |
| contents | <p>General-purpose server CPUs in modern data centers bear a dual burden: executing application workloads while simultaneously enforcing network policies. This split responsibility introduces computational overhead, cache contention, and latency variability that degrade both application throughput and network performance. This article examines the architectural case for offloading policy enforcement, connection tracking, firewall operations, and traffic metering to Data Processing Units (DPUs)—purpose-built accelerators integrated directly into the network data path. By relocating these functions from host CPUs to dedicated silicon, organizations recover substantial compute headroom while achieving deterministic, sub-microsecond network performance. The article analyzes the bottlenecks of CPU-based network processing, the architectural design of modern DPUs, the role of open standards in enabling portable policy management, and the operational benefits across diverse deployment scenarios. Results demonstrate measurable gains in resource utilization, energy efficiency, and latency consistency for latency-sensitive workloads, establishing hardware-accelerated network processing as a foundational shift in data center architecture.</p> |
| format | Recurso digital |
| id | zenodo_https___doi_org_10_5281_zenodo_19858488 |
| institution | Zenodo |
| language | |
| publishDate | 2026 |
| publisher | Zenodo |
| record_format | zenodo |
| spellingShingle | Offloading Network Policy Enforcement to Data Processing Units Satya Sagar Reddi <p>General-purpose server CPUs in modern data centers bear a dual burden: executing application workloads while simultaneously enforcing network policies. This split responsibility introduces computational overhead, cache contention, and latency variability that degrade both application throughput and network performance. This article examines the architectural case for offloading policy enforcement, connection tracking, firewall operations, and traffic metering to Data Processing Units (DPUs)—purpose-built accelerators integrated directly into the network data path. By relocating these functions from host CPUs to dedicated silicon, organizations recover substantial compute headroom while achieving deterministic, sub-microsecond network performance. The article analyzes the bottlenecks of CPU-based network processing, the architectural design of modern DPUs, the role of open standards in enabling portable policy management, and the operational benefits across diverse deployment scenarios. Results demonstrate measurable gains in resource utilization, energy efficiency, and latency consistency for latency-sensitive workloads, establishing hardware-accelerated network processing as a foundational shift in data center architecture.</p> |
| title | Offloading Network Policy Enforcement to Data Processing Units |
| url | https://doi.org/10.5281/zenodo.19858488 |