Why Offload Virtualized Network and Security Services?

Learn how DPU’s will enable the next frontier for scalable, distributed infrastructures.

This blog is co-authored by Paul Turner, Vice President Product Management vSphere, VMware.

We live in a time where the only true constant is change. Modern organizations continue to experience increasingly larger amounts of data traffic across their IT infrastructures from demanding applications like artificial intelligence, machine learning and big data. At the same time, the location of these applications is moving away from centralized architectures and becoming more distributed across data centers, the network edge and into multi-cloud environments. With an ever-increasing number of cyberattacks, security continues to be a major concern for all organizations.

It’s been very exciting to watch PC/server processing technologies evolve over the years, starting with the basic Central Processing Unit (CPU) which acts as the main controller for all applications and associated services like networking and security, to more recent Graphics Processing Unit (GPU) with parallel processing that helps accelerate computer graphics workloads. The Data Processing Unit (DPU) is the latest innovation in this space, with unique capabilities that include offloading infrastructure services from the CPU and enhancing their performance with built-in hardware accelerators.

Later this year, VMware and Dell Technologies will once again be breaking barriers together with the release of a jointly developed solution under the umbrella of Project Monterey that offloads NSX-T networking and security services to the DPU.

Offloading NSX-T networking services tasks from the server CPU to the DPU will allow the DPU to now take over handling of these services. For example, functions like virtual switching or packet processing leveraging hardware acceleration, will be processed by the DPU. This offloading has two key benefits for IT organizations. First, it saves server CPU cycles for applications and virtualization activities. Secondly, it improves virtual networking function performance using hardware accelerators. Using these accelerators will help meet real-time and delay-sensitive demands for modern applications that are such as distributed databases, video streaming and telco radio networks.

As with networking, the DPU offload of NSX-T security tasks will allow the DPU to relieve the CPU of these services. Offloading virtual security services to the DPU has two key benefits for an IT organization. It will provide distributed layer 4-7 virtual firewall security to take place on the DPU with no network performance impact. Additionally, implementing micro-segmentation on the DPU will help reduce the attack surface for cyberthreats to a minimum and enable a zero-trust architecture inside the data center.

Today’s enterprise organizations are being challenged with the demands of modern workloads and applications. To help with these challenges, a technology shift is occurring for virtual infrastructures with a distributed control fabric architecture by leveraging innovative DPU technology.

Dell and VMware are working closely together to help bring this unique DPU-based solution¹, that will offload virtual network and security services from the CPU to the DPU, with even more innovation to follow. To discover more, please visit Dell’s networking solutions page.

1 Based on internal analysis of publicly available information, June 29, 2022.

Ihab Tarazi

About the Author: Ihab Tarazi

Ihab Tarazi is the Chief Technology Officer and Senior Vice President at Dell Technologies, Infrastructure Solutions Group Core where he is responsible for technology strategy and next generation architecture for Compute, Storage and Network platforms including Edge, 5G and AI/HPC, as well as engagements with technology vendors and cloud ecosystems. Prior to this role, Mr. Tarazi served as Chief Technology Officer at Packet Host, Inc. (currently Equinix Metal), a leading bare metal cloud company built for developers, where he was responsible for the company's Product, Engineering and Technology. Prior to joining Packet, Mr. Tarazi held a number of positions in the telecom and infrastructure space, including Chief Technology Officer at data center and colocation provider Equinix, where he was responsible for developing the Equinix Cloud Exchange and strategic engagements with leading platforms in the Cloud, Security, Storage, Edge and IoT. Mr. Tarazi previously served as VP Engineering and Technology at Verizon, where he led a global team for the Engineering and Product Development of Global Enterprise Services including MPLS VPN, IP, Ethernet, Security and Managed Services. He has served as a member of the board of directors for NeoPhotonics Corp. since October 2015.  He is also a member of the board for Telecom Infrastructure Project (TIP). Mr. Tarazi holds a B.S. degree in Electrical Engineering and Telecommunications from the University of Maryland, and an M.S. in Telecommunications Management from Southern Methodist University.