←All research digests研究導讀總表
Research digest研究導讀
Research digest 3 of 3 · Chapter 9: Front end and checkpoints
研究導讀 3 / 3 · 第 9 章:前端網路與檢查點

DistDPU: A Disaggregated DPU Architecture for High-Performance and Cost-Efficient AI CloudsDistDPU:為高效能、具成本效益的 AI 雲端設計的解耦式 DPU 架構

After reading, you can explain why one DPU per 400G NIC wastes control silicon in an AI cloud, how DistDPU runs nine NICs from one shared control module, and what that costs.讀完後,你能說明在 AI 雲端裡每張 400G NIC 配一顆 DPU 為何浪費控制晶片、DistDPU 如何用一個共用的控制模組管理九張 NIC,以及這樣做的代價。

≈ 11 min · 1 interactive panel · 5-question quiz≈ 11 分鐘 · 1 個互動面板 · 5 題測驗Chapter 9 ↗第 9 章 ↗Jump to the quiz ↓跳到測驗 ↓
If you read nothing else
只讀這一段也可以

Tencent's AI cloud must give each GPU server 400 Gb/s to 3.2 Tb/s of RDMA with VPC isolation, also for bare-metal tenants who have root. One DPU per NIC buys nine Arm SoCs per server, yet in production the control cores of an AI server stay about 14% busy. DistDPU splits the DPU. One Orchestration Module (OM) on the front-end NIC runs all control software; a lean Execution Module (EM) on each 2×200G NIC runs the fast path. A private PCIe channel that the tenant cannot reach joins them: up to 3.6 Tb/s of provisioned capacity under one policy anchor. On a two-node H20 testbed, per-NIC RDMA throughput was within 0.4–2.8% of nine BlueField-3s or ConnectX-7s. In the paper's normalized analysis, nine BlueField-3s cost 4.91× and draw 2.77× the power per node.

騰訊的 AI 雲端必須給每台 GPU 伺服器 400 Gb/s 到 3.2 Tb/s 的 RDMA 與 VPC 隔離,擁有 root 的裸機租戶也不例外。每張 NIC 配一顆 DPU,等於每台伺服器買九顆 Arm SoC,但在正式環境中,AI 伺服器的控制核心只有約 14% 在忙。DistDPU 把 DPU 拆開。前端 NIC 上的一個編排模組(Orchestration Module,OM)執行全部控制軟體;每張 2×200G NIC 上一個精簡的執行模組(Execution Module,EM)執行快速路徑。兩者由一條租戶碰不到的私有 PCIe 通道相連:在單一政策錨點下提供最多 3.6 Tb/s 的配置容量。在兩節點的 H20 測試平台上,單張 NIC 的 RDMA 吞吐量與九顆 BlueField-3 或 ConnectX-7 相差 0.4–2.8%。依論文的正規化分析,九顆 BlueField-3 每個節點的成本是 4.91 倍、功耗是 2.77 倍。

1. Where this paper sits1. 這篇論文的位置

In Section 9.1, an HPN host has NIC 0 for the front end and NICs 1–8 for the back end. Section 6 (above Panel 6) says NIC 0 is a BlueField-3 DPU, a NIC with its own Arm cores that can enforce tenant policy outside the tenant's OS, and that HPN does not quantify this. Two questions stay open: what a DPU's control plane costs at 3.2 Tb/s per server, and who enforces policy on the eight back-end NICs. DistDPU answers both from production. Checkpoint, storage and management traffic stay on the front-end NIC, but that NIC becomes the control anchor of all nine.

在第 9.1 節,HPN 主機的 NIC 0 給前端、NIC 1–8 給後端。第 6 節(在面板 6 上方)說 NIC 0 是一顆 BlueField-3 DPU,一張有自己 Arm 核心、能在租戶作業系統之外執行租戶政策的 NIC,並說 HPN 沒有量化這一點。還有兩個問題沒有答案:每台伺服器 3.2 Tb/s 時 DPU 的控制平面要花多少,以及誰在八張後端 NIC 上執行政策。DistDPU 用正式環境的資料回答這兩題。檢查點、儲存與管理流量留在前端 NIC,但這張 NIC 成為全部九張的控制錨點。

Words used below. A VPC gives a tenant its own address space: tenant addresses are VIPs, physical ones PIPs. On bare metal the tenant has root on the whole server, so no host software can be trusted to enforce policy.

下文用到的詞。VPC(虛擬私有雲)給租戶一個自己的位址空間:租戶位址是 VIP,實體位址是 PIP。在裸機(bare metal)上,租戶擁有整台伺服器的 root,所以主機上沒有任何軟體能被信任來執行政策。

2. The problem, measured2. 問題,用量測說話

Requirements (§2.2). R1: per-server bandwidth from 400 Gb/s to 3.2 Tb/s. R2: bare-metal, VM and container tenants under one VPC, with the idle CPUs of GPU servers rented to general-compute tenants. R3: network CapEx near 10% of an Ethernet cluster, a share the paper cites from the Meta RoCE paper.

需求(§2.2)。R1:每台伺服器的頻寬從 400 Gb/s 到 3.2 Tb/s。R2:裸機、VM 與容器租戶共用同一種 VPC,GPU 伺服器閒置的 CPU 租給一般運算租戶。R3:網路 CapEx 約占 Ethernet 叢集的 10%,這個比例是論文引自 Meta RoCE 論文。

Why the usual answers fail (§2.3, §7). A fast-path offload NIC leaves the control plane and slow path on the host, so on bare metal a tenant with root owns the enforcement point. Stacked monolithic DPUs keep an enforcement point in every card, but they repeat an SoC, memory, OS and failure domain for every 400 Gb/s. One DPU plus eight commodity RDMA NICs costs less than nine DPUs, but the commodity NICs have no trusted channel to the DPU. Their control falls back to host drivers, and the policy anchor splits. Figure A compares the three layouts.

常見的做法為何不行(§2.3、§7)。快速路徑卸載 NIC 把控制平面與慢速路徑留在主機上,所以在裸機上,擁有 root 的租戶掌握了執行點。堆疊單體式 DPU 讓每張卡都有執行點,卻每 400 Gb/s 就重複一套 SoC、記憶體、作業系統與故障域。一顆 DPU 加八張商用 RDMA NIC 比九顆 DPU 便宜,但商用 NIC 與 DPU 之間沒有可信通道。它們的控制退回主機驅動程式,政策錨點因此分裂。圖 A 比較這三種配置。

(a) nine DPUs(a) 九顆 DPUcloud plane: 9 DPUs雲端平面:9 顆 DPUSoCDPSoCDPSoCDPSoCDPSoCDPSoCDPSoCDPSoCDPSoCDP9 separate stacks9 套各自獨立9 SoCs, 9 OS images9 顆 SoC、9 套 OSanchor: in every card錨點:每張卡都有mgmt endpoints: 9管理端點:9 個(b) 1 DPU + 8 RNICs(b) 1 顆 DPU + 8 張 RNICcloud plane: 1 DPU雲端平面:1 顆 DPUSoCDPRNICRNICRNICRNICRNICRNICRNICRNICtenant's host drivers主機 OS 驅動(租戶有 root)1 SoC1 顆 SoCanchor: card 0 only錨點:只在卡 08 NICs: host drivers8 張 NIC 靠主機驅動(c) DistDPU(c) DistDPUcloud plane: 1 DPU雲端平面:1 顆 DPUOMEMEMEMEMEMEMEMEMEMM2M: private PCIeM2M:私有 PCIe1 SoC (the OM)1 顆 SoC(即 OM)anchor: OM for all 9錨點:OM 管全部 9 張mgmt endpoints: 1管理端點:1 個
(a) nine DPUs(a) 九顆 DPUcloud plane: 9 DPUs雲端平面:9 顆 DPUSoCDPSoCDPSoCDPSoCDPSoCDPSoCDPSoCDPSoCDPSoCDP9 separate stacks9 套各自獨立9 SoCs, 9 OS images9 顆 SoC、9 套 OSanchor: in every card錨點:每張卡都有mgmt endpoints: 9管理端點:9 個(b) 1 DPU + 8 RNICs(b) 1 顆 DPU + 8 張 RNICcloud plane: 1 DPU雲端平面:1 顆 DPUSoCDPRNICRNICRNICRNICRNICRNICRNICRNICtenant's host drivers主機 OS 驅動(租戶有 root)1 SoC1 顆 SoCanchor: card 0 only錨點:只在卡 08 NICs: host drivers8 張 NIC 靠主機驅動(c) DistDPU(c) DistDPUcloud plane: 1 DPU雲端平面:1 顆 DPUOMEMEMEMEMEMEMEMEMEMM2M: private PCIeM2M:私有 PCIe1 SoC (the OM)1 顆 SoC(即 OM)anchor: OM for all 9錨點:OM 管全部 9 張mgmt endpoints: 1管理端點:1 個
Figure A. Three ways to give an 8-GPU server nine NICs. Orange: a control SoC with its memory and OS. Blue: a datapath (DP), an RDMA NIC (RNIC) or an EM. An empty light slot means the card has no SoC. Only (a) and (c) keep the policy anchor out of the tenant's reach, and only (c) does it with one SoC.圖 A。讓 8 GPU 伺服器擁有九張 NIC 的三種方式。橘色:帶記憶體與作業系統的控制 SoC。藍色:資料路徑(DP)、RDMA NIC(RNIC)或 EM。淺色空格表示該卡沒有 SoC。只有 (a) 與 (c) 讓政策錨點遠離租戶,而只有 (c) 只用一顆 SoC。Drawn for this primer from Mei et al., SIGCOMM 2026, §2.3, §3.2 and §7.

The divergence, measured. In 12 hours of production telemetry (the paper's Figure 2), AI instances, with a few long-lived elephant flows, create an order of magnitude fewer flow-table sessions than general-compute instances. One DistDPU serving 3.6 Tb/s keeps its Arm cores about 14% busy, no busier than a DPU serving a 400 Gb/s general node. The paper calls this the control–data plane divergence: bandwidth grows each GPU generation; control work does not.

量到的分歧。在正式環境 12 小時的遙測中(論文 Figure 2),只跑少數長壽大象流的 AI 執行個體,建立的流表 session 比一般運算執行個體少一個數量級。一顆服務 3.6 Tb/s 的 DistDPU,Arm 核心約 14% 在忙,不比服務 400 Gb/s 一般節點的 DPU 更忙。論文稱之為控制與資料平面的分歧:頻寬每一代都成長,控制工作卻不會。

Two line charts over 12 hours: flow-table session rate high for general compute and near zero for AI instances; DPU Arm-core utilization around 14 to 19 percent for both.
The paper's Figure 2, 12 hours of production telemetry (measured). (a) Session rate: general compute about 0.75–0.87×1050.75\text{–}0.87 \times 10^{5} entries/s, AI about 0.02–0.1×1050.02\text{–}0.1 \times 10^{5} (read from the plot). (b) Arm-core load: general compute at 400G about 15–16%, AI on DistDPU at 3.6T about 14%. The y-axis of (b) starts near 13%.論文的 Figure 2,正式環境 12 小時的遙測(實測)。(a) session 速率:一般運算約每秒 0.75–0.87×1050.75\text{–}0.87 \times 10^{5} 筆,AI 約 0.02–0.1×1050.02\text{–}0.1 \times 10^{5} 筆(從圖上讀出)。(b) Arm 核心負載:400G 的一般運算約 15–16%,3.6T 的 DistDPU 上的 AI 約 14%。(b) 的縱軸從約 13% 開始。Screenshot of Mei et al., SIGCOMM 2026, Figure 2 (ACM PDF, p. 4).

3. The design3. 設計

3.1 Split by what must grow with bandwidth3.1 依「必須隨頻寬成長」來切分

The partition rule has two steps (§3.1). First, keep only the domains that must grow with bandwidth: those on the per-packet path, and those that must exist per port to show devices to the host. Second, inside each such domain, the OM decides and the EM executes only what line rate needs. Everything else stays in the OM.

切分規則有兩步(§3.1)。第一,只挑出必須隨頻寬成長的領域:在逐封包路徑上的,以及必須每個埠各有一份才能向主機呈現裝置的。第二,在每個這樣的領域裡,由 OM 決策,EM 只執行線速所需的部分。其餘一切留在 OM。

Domain領域Each EM executes每個 EM 執行The OM decidesOM 決定
Device virtualization裝置虛擬化PCIe configuration and BARs, up to 16K VFsPCIe 組態與 BAR,最多 16K 個 VFPF/VF layout and quotasPF/VF 配置與配額
ETH/RDMA engineETH/RDMA 引擎Spraying, transport, the CC reaction loop封包噴灑、傳輸、壅塞控制反應迴圈CC algorithm and parameters壅塞控制演算法與參數
Network virtualization網路虛擬化Lookups, encap or rewrite, QoS, ACLs查表、封裝或改寫、QoS、ACLSlow path, policy compilation慢速路徑、政策編譯
Does not grow不隨頻寬成長Nothing無Storage, keys, cloud agents儲存、金鑰、雲端代理程式

Physical form (§3.2, §5.1). The full-feature NIC carries the OM (16 Arm cores at 2.4 GHz, 64 GB of DDR5) and a local EM. An EM-only NIC has only an EM with 2×200G ports. A server has one full-feature NIC and NN EM-only NICs (0, 4 or 8), so its bandwidth is (N+1)×400(N+1) \times 400 Gb/s: 3.6 Tb/s of provisioned capacity at most. The cloud sees one logical DPU; the host sees standard PCIe devices. Appendix C, which is not peer-reviewed, adds a 1.5 Tb/s UCIe link between the OM and EM dies.

實體形式(§3.2、§5.1)。全功能 NIC 載著 OM(16 個 2.4 GHz Arm 核心、64 GB DDR5)與一個本地 EM。EM-only NIC 只有一個帶 2×200G 埠的 EM。一台伺服器有一張全功能 NIC 與 NN 張 EM-only NIC(0、4 或 8),所以頻寬是 (N+1)×400(N+1) \times 400 Gb/s:最多 3.6 Tb/s 的配置容量。雲端看到一顆邏輯 DPU;主機看到標準的 PCIe 裝置。附錄 C(未經同儕審查)補充 OM 與 EM 晶粒之間有一條 1.5 Tb/s 的 UCIe 連結。

Block diagram: Orchestration Module blocks above Execution Module blocks; a server chassis with a full-feature NIC holding OM and EM, an M2M fabric, and a stack of EM-only NICs on the host PCIe bus.
The paper's Figure 3 (a design diagram). Left: what the OM decides and what each EM executes; only the yellow EM blocks are copied as bandwidth grows. Right: one full-feature NIC and NN EM-only NICs in one server, joined by the M2M fabric.論文的 Figure 3(設計示意圖)。左:OM 決策的部分與每個 EM 執行的部分;頻寬成長時只複製黃色的 EM 方塊。右:一台伺服器裡的一張全功能 NIC 與 NN 張 EM-only NIC,以 M2M fabric 相連。Screenshot of Mei et al., SIGCOMM 2026, Figure 3 (ACM PDF, p. 5).

Inside the EM (§4.1). SmartEP runs PCIe configuration in software on a small EM core and sends doorbells and data straight to hardware, so one image presents up to 16K VFs. The RDMA engine sprays packets by UDP source port, places out-of-order packets by offset and retransmits selectively; DCQCN is the default. DOT translates GPU addresses for GPUDirect RDMA in VMs with a few base-plus-offset intervals.

EM 內部(§4.1)。SmartEP 在 EM 內一顆小核心上以軟體處理 PCIe 組態,doorbell 與資料直接進硬體,所以一套映像就能呈現最多 16K 個 VF。RDMA 引擎依 UDP 來源埠噴灑封包、依偏移放置亂序封包,並做選擇性重傳;預設是 DCQCN。DOT 為 VM 內的 GPUDirect RDMA 用幾段「基底加偏移」的區間轉換 GPU 位址。

3.2 The data path: overlay or NAT3.2 資料路徑:overlay 或 NAT

Every packet crosses one EM pipeline: parse, classify and apply policy, encapsulate or translate, forward (§4.1.3). The OM compiles policy into table entries and installs them over the management channel. Overlay mode serves general-compute nodes and shared NICs: the EM wraps the packet in VXLAN. NAT mode serves tenants that own their GPUs and NICs: the EM rewrites the VIP to the PIP on egress and back on ingress, with no tunnel header (Figure B). Only the OM can read or write the NAT table.

每個封包都穿過同一條 EM 管線:解析、分類並套用政策、封裝或轉換、轉送(§4.1.3)。OM 把政策編譯成表項,經管理通道安裝下去。Overlay 模式服務一般運算節點與共用的 NIC:EM 把封包包進 VXLAN。NAT 模式服務獨占 GPU 與 NIC 的租戶:EM 在送出時把 VIP 改寫成 PIP,收到時再改回,沒有隧道標頭(圖 B)。只有 OM 能讀寫 NAT 表。

OM compiles policy into table entries · tenant cannot read themOM 把政策編譯成表項 · 租戶讀不到Parse解析Classify & Policy分類與政策Encap/Translate封裝 / 轉換Forward轉送tables over M2M經 M2M 下發表項VF · tenant · 5-tupleVF · 租戶 · 五元組tunnel or rewrite隧道或改寫overlayoverlayshared NIC共用 NICPIP + VXLAN · ≈50 BPIP + VXLAN · 約 50 BVIPpayload載荷NATNATown GPUs + NIC獨占 GPU 與 NICPIPpayload載荷VIP rewritten, 0 B added改寫 VIP,增加 0 B
OM compiles policy into table entries · tenant cannot read themOM 把政策編譯成表項 · 租戶讀不到Parse解析Classify & Policy分類與政策Encap/Translate封裝 / 轉換Forward轉送tables over M2M經 M2M 下發表項VF · tenant · 5-tupleVF · 租戶 · 五元組tunnel or rewrite隧道或改寫overlayoverlayshared NIC共用 NICPIP + VXLAN · ≈50 BPIP + VXLAN · 約 50 BVIPpayload載荷NATNATown GPUs + NIC獨占 GPU 與 NICPIPpayload載荷VIP rewritten, 0 B added改寫 VIP,增加 0 B
Figure B. One EM pipeline, two modes. The OM fills the tables over M2M. Overlay adds an outer PIP and VXLAN header; NAT rewrites the VIP to the PIP and adds nothing. The 50-byte size is the standard VXLAN overhead, added here for scale.圖 B。一條 EM 管線,兩種模式。OM 經 M2M 填入表項。Overlay 加上外層 PIP 與 VXLAN 標頭;NAT 把 VIP 改寫成 PIP,不增加任何位元組。50 位元組是 VXLAN 的標準額外開銷,這裡補上以示大小。Drawn for this primer from Mei et al., SIGCOMM 2026, §4.1.3 and Figure 5.

When rules are installed (§4.2). The VIP-to-PIP map is installed when an instance is created; runtime rules are installed on demand. In overlay mode, where RDMA and TCP share one NIC and IP, RDMA connection setup runs over TCP, so the first TCP flow-table miss tells the OM to pre-install the RDMA entries before the first RDMA data packet. RDMA entries are pinned in on-chip SRAM; the larger, faster-changing general-compute entries go to DRAM.

規則何時安裝(§4.2)。VIP 到 PIP 的對應在建立執行個體時安裝;執行期的規則按需安裝。在 overlay 模式下,若 RDMA 與 TCP 共用同一張 NIC 與 IP,RDMA 的連線建立走 TCP,所以第一次 TCP 流表未命中就通知 OM,在第一個 RDMA 資料封包之前預先裝好 RDMA 表項。RDMA 表項釘在晶片上的 SRAM;較大、變動較快的一般運算表項放到 DRAM。

3.3 The policy anchor: the M2M fabric3.3 政策錨點:M2M fabric

The OM reaches every EM over the M2M fabric (module to module; §4.3, Appendix B). Messages are typed objects (device profiles, CC policies, tables, telemetry). Each push carries a rising epoch, and an EM accepts only the latest, so a late message cannot overwrite a newer one. The OM is wired only to its local EM, which relays messages over PCIe to the other EMs. Access checks keep host software off the M2M endpoints: even with root, the host OS sees only standard PCIe devices, while the tables that enforce its VPC sit behind a channel it cannot reach.

OM 經 M2M fabric(模組對模組;§4.3、附錄 B)連到每一個 EM。訊息是有型別的物件(裝置設定檔、壅塞控制政策、表項、遙測)。每次推送都帶著遞增的 epoch,EM 只接受最新的,所以晚到的訊息蓋不掉較新的。OM 只直接接到本地 EM,由它經 PCIe 把訊息中繼給其他 EM。存取檢查讓主機軟體碰不到 M2M 端點:主機作業系統即使有 root,也只看到標準 PCIe 裝置,而執行它的 VPC 的表放在一條它碰不到的通道後面。

Rail-aware subnetting (Appendix A, not peer-reviewed). All NICs on one rail share one IP subnet. A subnet match then tells intra-rail from cross-rail traffic in constant time, picks the local NIC in the destination's subnet as the PXN relay, and lets the kernel route by longest-prefix match. Section 6.3 explains rails.

依 rail 切分子網(附錄 A,未經同儕審查)。同一條 rail 上的所有 NIC 共用一個 IP 子網。比對子網就能在常數時間內分辨 rail 內與跨 rail 的流量,挑出與目的地同子網的本地 NIC 當 PXN 中繼,並讓核心用最長前綴比對來路由。第 6.3 節說明了 rail。

3.4 What sharing costs: one extra hop, one shared fate3.4 共用的代價:多一跳,同一命運

The extra hop. Data packets take none: a GPU's traffic goes from the host to its EM and onto the wire. A control message to an EM-only NIC takes one relay hop through the local EM. The paper measures 2.2 µs for a 4-byte write and 4.9 µs for a read over PCIe (§5.4), with no separate relay figure. Only events that need the OM pay it, and pre-installed entries keep it off the training path.

多出來的一跳。資料封包不多跳:GPU 的流量從主機到它的 EM 再上線路。送往 EM-only NIC 的控制訊息要經本地 EM 中繼,多一跳。論文量到經 PCIe 寫入 4 位元組要 2.2 µs、讀取要 4.9 µs(§5.4),沒有單獨給中繼的數字。只有需要 OM 的事件付這個代價,而預先裝好的表項讓它不落在訓練路徑上。

The shared fate. One OM controls up to 3.6 Tb/s, so its failure domain is the control plane of the whole server (§6). A watchdog restarts a crashed OM process at millisecond scale, because management state lives in memory apart from the control logic. Meanwhile the EMs keep forwarding and running their congestion-control loops; only new OM decisions wait. EM failures, mostly optics, ran at 0.10–0.73% per month over the last year; per-EM dual-port failover handles them, and the OM can isolate one faulty EM (Figure C).

共同的命運。一個 OM 控制最多 3.6 Tb/s,所以它的故障域是整台伺服器的控制平面(§6)。因為管理狀態放在記憶體中、與控制邏輯分開,watchdog 能在毫秒級重啟崩潰的 OM 行程。這段期間 EM 照常轉送、跑壅塞控制迴圈;只有需要 OM 新決策的工作要等。過去一年 EM 故障(多為光學元件)每月 0.10–0.73%;由每個 EM 的雙埠容錯切換處理,OM 也能隔離單一故障的 EM(圖 C)。

to the networks: 2×200G per EM通往網路:每個 EM 2×200Gfull-feature NIC全功能 NICOMEM0EM1EM-onlyEM2EM-onlyEM3EM-onlyEM8EM-only…EM4–7host PCIe: GPUs, CPUs, tenant OS (root on bare metal)主機 PCIe:GPU、CPU、租戶 OS(裸機時有 root)data: host → EM → wire, no extra hop資料:主機 → EM → 線路,不多跳control: OM → EM0 → EMk · 2.2/4.9 µs控制:OM → EM0 → EMk,寫 2.2、讀 4.9 µsOM process crashOM 行程崩潰watchdog restart: ms scalewatchdog 重啟:毫秒級EMs keep forwarding, RDMA, CCEM 照常轉送、RDMA、CCnew rules wait for the OM新規則要等 OM 回來EM fault (mostly optics)EM 故障(多為光學元件)0.10–0.73% per month每月 0.10–0.73%dual-port failover per EM每個 EM 雙埠容錯切換OM isolates that one EMOM 只隔離那一個 EM
to the networks: 2×200G per EM通往網路:每個 EM 2×200Gfull-feature NIC全功能 NICOMEM0EM1EM-onlyEM2EM-onlyEM3EM-onlyEM8EM-only…EM4–7host PCIe: GPUs, CPUs, tenant OS (root on bare metal)主機 PCIe:GPU、CPU、租戶 OS(裸機時有 root)data: host → EM → wire, no extra hop資料:主機 → EM → 線路,不多跳control: OM → EM0 → EMk · 2.2/4.9 µs控制:OM → EM0 → EMk,寫 2.2、讀 4.9 µsOM process crashOM 行程崩潰watchdog restart: ms scalewatchdog 重啟:毫秒級EMs keep forwarding, RDMA, CCEM 照常轉送、RDMA、CCnew rules wait for the OM新規則要等 OM 回來EM fault (mostly optics)EM 故障(多為光學元件)0.10–0.73% per month每月 0.10–0.73%dual-port failover per EM每個 EM 雙埠容錯切換OM isolates that one EMOM 只隔離那一個 EM
Figure C. Two paths through one server. Green: data enters each EM from the host and leaves on that EM's own ports, with no extra hop. Orange: management messages go from the OM through the local EM (EM0) over PCIe, 2.2 µs per 4-byte write and 4.9 µs per read; the host has no endpoint on this path. Below: what each kind of failure stops (§6).圖 C。穿過一台伺服器的兩條路徑。綠色:資料從主機進入每個 EM,從那個 EM 自己的埠出去,不多跳。橘色:管理訊息從 OM 經本地 EM(EM0)走 PCIe,4 位元組寫入 2.2 µs、讀取 4.9 µs;主機在這條路上沒有端點。下方:每種故障會停下什麼(§6)。Drawn for this primer from Mei et al., SIGCOMM 2026, §4.3, §5.4, §6 and Figure 6.

4. Implementation4. 實作

The first generation used FPGA EMs; the deployed one is an ASIC with separate execution and orchestration dies (§3.2). The paper gives no lines of code. Two lessons came from operation (§6): support grew from early SRD-style unordered semantics to verbs-compatible RC, and idle host CPUs on GPU servers would cost about 20% of revenue (operator estimate), so co-location is the norm. A pilot ran in May 2023 and production began in March 2024. The fleet has more than 1,000 servers each at N=0N = 0 and at N=8N = 8 (about 10,000 GPUs), and about 100 at N=4N = 4.

第一代用 FPGA 做 EM;部署中的這一代是 ASIC,執行晶粒與編排晶粒分開(§3.2)。論文沒有給程式碼行數。營運帶來兩個教訓(§6):支援範圍從早期 SRD 式的無序語意擴充到相容 verbs 的 RC;GPU 伺服器閒置的主機 CPU 會損失約 20% 營收(業者估計),所以混合部署是常態。2023 年 5 月試行,2024 年 3 月上線正式環境。機隊在 N=0N = 0 與 N=8N = 8 各有超過 1,000 台伺服器(後者約 10,000 顆 GPU),N=4N = 4 約 100 台。

5. What was measured5. 量到了什麼

Setup (§5.1). Two nodes, each with eight NVIDIA H20 GPUs and a 96-core AMD EPYC 9K84. DistDPU uses one full-feature NIC for management, checkpoint and storage plus eight EM-only NICs, with virtualization on. Multi-BF3 (nine BlueField-3s) and Multi-CX7 (nine ConnectX-7s) give one NIC to checkpoint and storage and run with virtualization off.

設定(§5.1)。兩個節點,每個有八顆 NVIDIA H20 GPU 與一顆 96 核 AMD EPYC 9K84。DistDPU 用一張全功能 NIC 承載管理、檢查點與儲存,加上八張 EM-only NIC,虛擬化開啟。Multi-BF3(九顆 BlueField-3)與 Multi-CX7(九張 ConnectX-7)各用一張 NIC 承載檢查點與儲存,虛擬化關閉。

Result結果Setup設定Number數字
OM CPU, 24 hoursOM 的 CPU,24 小時Production, 3.6 Tb/s servers (Fig. 7)正式環境,3.6 Tb/s 伺服器(Fig. 7)Average below 15%平均低於 15%
Peak RDMARDMA 峰值Testbed, one NIC (Fig. 10)測試平台,單張 NIC(Fig. 10)Within 0.4–2.8% of both baselines與兩個基準相差 0.4–2.8%
VXLAN vs NATVXLAN 與 NATTestbed, one 400G EM (Fig. 9)測試平台,一個 400G EM(Fig. 9)VXLAN 1.2–7.8% lower for large messages大訊息時 VXLAN 低 1.2–7.8%
Training, Mixtral 8×7B訓練,Mixtral 8×7B16 and 32 H20 GPUs (Fig. 11)16 與 32 顆 H20 GPU(Fig. 11)+0.43% to +1.26%+0.43% 到 +1.26%
Training, Llama2-7B訓練,Llama2-7BSame同上−0.03% to +0.1%−0.03% 到 +0.1%
Inference, DeepSeek-R1推論,DeepSeek-R1Testbed, SGLang (Figs. 12–13)測試平台,SGLang(Figs. 12–13)TTFT and TPOT within a few percentTTFT 與 TPOT 相差幾個百分點以內
M2M latency, 4 bytesM2M 延遲,4 位元組Deployed hardware, PCIe (§5.4)部署中的硬體,PCIe(§5.4)Write 2.2 µs, read 4.9 µs寫 2.2 µs、讀 4.9 µs

The throughput plot below is the core parity result. DistDPU had VPC virtualization on and the baselines had it off, so parity means that the provider's isolation costs little throughput. The low end of the VXLAN gap is about the header alone: by our arithmetic, 50 bytes on 4 KB of payload is 1.2%.

下面的吞吐量圖是持平結果的核心。DistDPU 開著 VPC 虛擬化,基準則關閉,所以持平代表業者的隔離只花很少的吞吐。VXLAN 落差的下限大約就是標頭本身:依我們的算術,4 KB 載荷加 50 位元組是 1.2%。

Grouped bar chart of RDMA bandwidth versus message size from 2 bytes to 4 MB for DistDPU, Multi-BF3 and Multi-CX7, unidirectional and bidirectional; bars level off near 390 and 780 Gb/s.
The paper's Figure 10: RDMA throughput of one 400G NIC against message size, measured on the two-node H20 testbed. Solid bars: one direction; hatched: both. From 64 KB, all three reach about 390 and 780 Gb/s; the peaks differ by 0.4–2.8%.論文的 Figure 10:單張 400G NIC 的 RDMA 吞吐量對訊息大小,於兩節點 H20 測試平台實測。實心:單向;斜線:雙向。從 64 KB 起,三者都達約 390 與 780 Gb/s;峰值相差 0.4–2.8%。Screenshot of Mei et al., SIGCOMM 2026, Figure 10 (ACM PDF, p. 10).

Cost and power: analysis, not measurement成本與功耗:分析,不是量測

The paper's Figure 8 gives per-node hardware cost and power, normalized to DistDPU = 1. Prices are confidential and the method is unstated, so read them only as ratios (§5.2):

論文的 Figure 8 給出每個節點的硬體成本與功耗,以 DistDPU = 1 正規化。價格保密、方法未說明,所以只能當比值讀(§5.2):

Per node, analysis每個節點,分析值Cost成本Power功耗
Multi-BF3: nine BlueField-3sMulti-BF3:九顆 BlueField-34.91×4.91×2.77×2.77×
Multi-CX7: nine ConnectX-7s, no DPU functions, host CPU not countedMulti-CX7:九張 ConnectX-7,沒有 DPU 功能,未計入所需的主機 CPU1.96×1.96×0.69×0.69×
Multi-DPU: nine of Tencent's own DPUsMulti-DPU:九顆騰訊自研 DPU2.45×2.45×3.46×3.46×
Multi-RNIC: nine of Tencent's own RNICsMulti-RNIC:九張騰訊自研 RNIC0.82×0.82×0.69×0.69×

The own-hardware pair shows that the gap comes from the architecture, not from NVIDIA's prices. A two-part model reproduces it. Let ss be the cost of one control block (SoC plus memory) and ee the cost of one datapath (an EM, or an RNIC of the same rate), as fractions of a DistDPU node with N=8N = 8:

自研硬體這一組說明差距來自架構,而非 NVIDIA 的定價。一個兩部分的模型可以重現它。令 ss 為一個控制區塊(SoC 加記憶體)的成本、ee 為一條資料路徑(一個 EM,或同速率的一張 RNIC)的成本,都以 N=8N = 8 的 DistDPU 節點為 1:

Cdist(N)=s+(N+1) eCstack(N)=(N+1) (s+e)CstackCdist=(N+1)(s+e)s+(N+1) e C_{\text{dist}}(N) = s + (N+1)\,e \qquad C_{\text{stack}}(N) = (N+1)\,(s+e) \qquad \frac{C_{\text{stack}}}{C_{\text{dist}}} = \frac{(N+1)(s+e)}{s+(N+1)\,e}

Fitted to the paper's ratios, one question per row (our fit, not the paper's method):

用論文的比值擬合,逐列計算如下(我們的擬合,不是論文的方法):

Question問題Calculation算式Result結果
Control block, from DistDPU = 1 and Multi-DPU = 2.45 at N=8N = 8控制區塊,由 N=8N = 8 時 DistDPU = 1、Multi-DPU = 2.45 得出s=(2.45−1)÷8s = (2.45 - 1) \div 8≈0.181\approx 0.181
Datapath, from s+9e=1s + 9e = 1資料路徑,由 s+9e=1s + 9e = 1 得出e=(1−0.181)÷9e = (1 - 0.181) \div 9≈0.091\approx 0.091
Check: nine RNICs (paper: 0.82)驗算:九張 RNIC(論文:0.82)9×0.0919 \times 0.091≈0.82\approx 0.82
Power: same fit to 3.46, then nine RNICs (paper: 0.69)功耗:同樣擬合 3.46,再驗算九張 RNIC(論文:0.69)sp=2.46÷8, 9ep=1−sps_p = 2.46 \div 8,\ 9e_p = 1 - s_psp≈0.31s_p \approx 0.319ep≈0.699e_p \approx 0.699ep≈0.699e_p \approx 0.69
Share of the stacked node's cost in SoCs堆疊節點成本中 SoC 的比例9×0.181÷2.459 \times 0.181 \div 2.45≈67%\approx 67\%power: about 80%功耗:約 80%

The control block is about 18% of a DistDPU node's NIC cost and 31% of its power; stacking makes it two thirds and four fifths. The ratio is 1 at N=0N = 0 and approaches 1+s/e≈31 + s/e \approx 3 as NN grows. Panel 1 runs the model with the control load. The paper's analysis also counts 8× faster growth of managed entities with stacking (§5.2).

控制區塊約占 DistDPU 節點 NIC 成本的 18%、功耗的 31%;堆疊讓它變成三分之二與五分之四。N=0N = 0 時比值為 1,NN 增加時趨近 1+s/e≈31 + s/e \approx 3。面板 1 把這個模型與控制負載一起算。論文的分析也指出,堆疊時被管理的實體成長快 8 倍(§5.2)。

Panel 1 · a model面板 1 · 模型

One control SoC or nine?一顆控制 SoC,還是九顆?

Provisioned bandwidth
配置頻寬
Control SoCs: stack / DistDPU
控制 SoC:堆疊 / DistDPU
Control load needed
所需控制負載
Idle control capacity
閒置的控制容量
Cost and power, stack ÷ DistDPU
成本與功耗,堆疊 ÷ DistDPU
Extra hops
多出的跳數

A model, not a measurement. Defaults are the paper's deployed values: N=8N = 8 EM-only NICs of 2×200G (3.6 Tb/s provisioned) and an OM below 15% busy in production (Figure 7). "Flat" follows Figure 2: control load does not grow with bandwidth. "With bandwidth" is our assumption for session-heavy tenants: the load scales up from its value at 400 Gb/s. Cost and power use our fit to the paper's own-hardware ratios (s=0.181s = 0.181, e=0.091e = 0.091; power 0.31 and 0.077), which gives 2.45× and 3.46× at N=8N = 8. The fit keeps the 2×200G block costs at every port speed and ignores each stacked SoC's own OS overhead, which favours stacking. The M2M latency is the measured 4-byte figure (§5.4). Try "With bandwidth" at N=8N = 8, then 2×400G.

這是模型,不是量測。預設值是論文部署中的數值:N=8N = 8 張 2×200G 的 EM-only NIC(配置 3.6 Tb/s),正式環境中 OM 忙碌低於 15%(Figure 7)。「持平」依 Figure 2:控制負載不隨頻寬成長。「隨頻寬成長」是我們對 session 很多的租戶的假設:負載從 400 Gb/s 時的值等比例放大。成本與功耗用我們對論文自研硬體比值的擬合(s=0.181s = 0.181、e=0.091e = 0.091;功耗 0.31 與 0.077),在 N=8N = 8 時得到 2.45 倍與 3.46 倍。這個擬合在各種埠速率都沿用 2×200G 的區塊成本,並忽略每顆堆疊 SoC 自己的作業系統開銷,這對堆疊有利。M2M 延遲是實測的 4 位元組數值(§5.4)。試試在 N=8N = 8 選「隨頻寬成長」,再換成 2×400G。

6. Limits and open questions6. 限制與未解的問題

The paper's own next steps are several OMs per server if near-data processing needs more compute, finer isolation for co-located tenants, and in-band Ethernet M2M for cross-node management, which is planned. A careful reader adds:

論文自己的下一步是:若近資料處理需要更多算力,每台伺服器放多個 OM;為混合部署的租戶做更細的隔離;以及用於跨節點管理的帶內 Ethernet M2M,目前還在規劃。細心的讀者還應補上:

  • Provisioned is not measured. 3.6 Tb/s is nine 400G port pairs. The RDMA test measured one NIC, and training used at most 32 GPUs, so spraying and CC selection are untested at fabric scale.配置不等於量測。3.6 Tb/s 是九組 400G 埠。RDMA 測試只量一張 NIC,訓練最多用 32 顆 GPU,所以封包噴灑與壅塞控制的選擇都沒有在整個網路的規模下測過。
  • Unequal configurations. Virtualization was on only for DistDPU, and the paper does not say whether NAT or VXLAN ran in the RDMA, training and inference tests.配置不對等。只有 DistDPU 開著虛擬化,論文也沒有說 RDMA、訓練與推論測試跑的是 NAT 還是 VXLAN。
  • Where the saving comes from. In Figure 2(b), DPUs for general compute and for AI are about equally busy. The saving is one SoC instead of nine, and even that one OM is about 85% idle.省下的錢從哪裡來。在 Figure 2(b) 中,服務一般運算與服務 AI 的 DPU 忙碌程度差不多。省下的是一顆 SoC 取代九顆,而就算只剩一個 OM,也約有 85% 閒置。
  • One OM, one fate. The paper gives no OM hardware failure rate and does not evaluate isolation between co-located tenants who share one OM.一個 OM,一個命運。論文沒有給 OM 硬體的故障率,也沒有評估共用一個 OM 的混合部署租戶之間的隔離。
  • Unmeasured mechanisms. No experiment isolates DOT, SRAM pinning, stable container GIDs or CC selection, and the cost method is unstated.沒有量測的機制。沒有實驗單獨測試 DOT、SRAM 釘選、穩定的容器 GID 或壅塞控制的選擇,成本的計算方法也沒有說明。

7. How it connects7. 與其他內容的關聯

  • Chapter 9: section 1's nine NICs per host, now under one manager. Section 5's rule that monitoring must not depend on the network it monitors becomes "policy must not depend on the host it polices", with M2M as an in-host out-of-band path. Section 6 gets the numbers that HPN did not give.第 9 章:第 1 節每台主機九張 NIC,現在歸同一個管理者。第 5 節「監控不能依賴它所監控的網路」變成「政策不能依賴它所管制的主機」,M2M 就是主機內的帶外路徑。第 6 節得到 HPN 沒有給的數字。
  • Chapter 2, "Generations, ports and the DPU": the same 2×200G ports and Gen5 x16 links, with the DPU split into dies. Chapter 7, sections 4 and 6: DCQCN, spraying and selective retransmission inside each EM.第 2 章的「世代、埠與 DPU」:同樣的 2×200G 埠與 Gen5 x16 連結,DPU 則拆成數個晶粒。第 7 章第 4 與 6 節:每個 EM 內的 DCQCN、封包噴灑與選擇性重傳。
  • ByteCheckpoint makes the checkpoint traffic on the full-feature NIC cheap; Checkmate moves checkpoint capture into the back-end switch. Guided readings: Alibaba HPN (the 1 + 8 NIC layout) and Meta RoCE (the CapEx share).ByteCheckpoint 讓全功能 NIC 上的檢查點流量變便宜;Checkmate 則把檢查點的擷取移到後端交換器。論文導讀:Alibaba HPN(1 + 8 張 NIC 的配置)與 Meta RoCE(CapEx 的比例)。

Key numbers關鍵數字

Number數字Meaning and setup意義與設定
≈14% · below 15%Control-core load at 3.6 Tb/s, 12 h (Fig. 2) · 24 h average (Fig. 7); production3.6 Tb/s 時控制核心的負載,12 小時(Fig. 2)· 24 小時平均(Fig. 7);正式環境
(N+1)×400(N+1) \times 400G, ≤\le 3.6 Tb/sProvisioned capacity per server, N ∈ {0, 4, 8}; not a measurement每台伺服器的配置容量,N ∈ {0, 4, 8};不是量測
0.4–2.8%Peak RDMA gap vs nine BlueField-3s or ConnectX-7s; one NIC, two-node H20 testbed與九顆 BlueField-3 或 ConnectX-7 的 RDMA 峰值差距;單張 NIC,兩節點 H20 測試平台
1.2–7.8%VXLAN goodput below NAT, large messages; one 400G EM, testbed大訊息時 VXLAN 有效吞吐低於 NAT;一個 400G EM,測試平台
+0.43–1.26% · −0.03–0.1%Training vs baselines, Mixtral 8×7B · Llama2-7B; 16 and 32 H20 GPUs與基準相比的訓練吞吐,Mixtral 8×7B · Llama2-7B;16 與 32 顆 H20 GPU
2.2 µs · 4.9 µsM2M write · read, 4-byte message over PCIe; deployed hardwareM2M 寫入 · 讀取,經 PCIe 的 4 位元組訊息;部署中的硬體
0.10–0.73% per monthEM failures, mostly optics; last year of production logsEM 故障,多為光學元件;過去一年的正式環境日誌
4.91× · 2.77×Multi-BF3 cost · power per node vs DistDPU; analysis, method unstatedMulti-BF3 每節點成本 · 功耗相對 DistDPU;分析值,方法未說明
2.45× · 3.46×Multi-DPU (own DPUs) cost · power vs DistDPU; analysisMulti-DPU(自研 DPU)成本 · 功耗相對 DistDPU;分析值

Terms used on this page本頁用到的術語

OM / EM
Orchestration Module, the one shared control SoC / Execution Module, the per-NIC line-rate datapath.
編排模組,唯一共用的控制 SoC/執行模組,每張 NIC 上的線速資料路徑。
Full-feature / EM-only NIC
The card with the OM and a local EM / the cheaper card with an EM only.
載有 OM 與本地 EM 的卡/只有 EM、較便宜的卡。
M2M fabric
The private OM-to-EM management channel over node-internal PCIe, relayed by the local EM.
OM 到 EM 的私有管理通道,走節點內部的 PCIe,由本地 EM 中繼。
Policy anchor
A point that enforces tenant policy and that the tenant cannot change, even with root.
執行租戶政策、且租戶即使有 root 也改不了的點。
Control–data plane divergence
Bandwidth grows each generation while control work stays flat.
頻寬每一代都成長,控制工作卻持平。
Overlay / NAT mode
Wrap the tenant packet in VXLAN / rewrite its VIP to a PIP one to one.
把租戶封包包進 VXLAN/一對一把 VIP 改寫成 PIP。

Check your understanding檢驗你的理解