{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,28]],"date-time":"2025-08-28T12:00:17Z","timestamp":1756382417415,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":107,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,11,4]],"date-time":"2024-11-04T00:00:00Z","timestamp":1730678400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Key R\\&D Program of Zhejiang Province","award":["2023R5202"],"award-info":[{"award-number":["2023R5202"]}]},{"DOI":"10.13039\/501100006374","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072302"],"award-info":[{"award-number":["62072302"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Alibaba Innovation Research Project","award":["2022010307"],"award-info":[{"award-number":["2022010307"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,11,4]]},"DOI":"10.1145\/3646547.3688436","type":"proceedings-article","created":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T09:40:26Z","timestamp":1730454026000},"page":"635-650","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["Understanding Network Startup for Secure Containers in Multi-Tenant Clouds: Performance, Bottleneck and Optimization"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0156-2454","authenticated-orcid":false,"given":"Yunzhuo","family":"Liu","sequence":"first","affiliation":[{"name":"Shanghai Jiao Tong University & Alibaba Cloud, Shanghai, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9018-8881","authenticated-orcid":false,"given":"Junchen","family":"Guo","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6711-4342","authenticated-orcid":false,"given":"Bo","family":"Jiang","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-9646-8407","authenticated-orcid":false,"given":"Pengyu","family":"Zhang","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Seattle, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6942-7692","authenticated-orcid":false,"given":"Xiaoqing","family":"Sun","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-2611-757X","authenticated-orcid":false,"given":"Yang","family":"Song","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-8471-8684","authenticated-orcid":false,"given":"Wei","family":"Ren","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-1716-9000","authenticated-orcid":false,"given":"Zhiyuan","family":"Hou","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8096-5528","authenticated-orcid":false,"given":"Biao","family":"Lyu","sequence":"additional","affiliation":[{"name":"Zhejiang University & Alibaba Cloud, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-6384-1165","authenticated-orcid":false,"given":"Rong","family":"Wen","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7756-0952","authenticated-orcid":false,"given":"Shunmin","family":"Zhu","sequence":"additional","affiliation":[{"name":"Hangzhou Feitan Cloud & Alibaba Cloud, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0357-8356","authenticated-orcid":false,"given":"Xinbing","family":"Wang","sequence":"additional","affiliation":[{"name":"Shanghai Jiao Tong University, Shanghai, China"}]}],"member":"320","published-online":{"date-parts":[[2024,11,4]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proceedings of USENIX NSDI. USENIX","author":"Agache Alexandru","year":"2020","unstructured":"Alexandru Agache, Marc Brooker, Alexandra Iordache, Anthony Liguori, Rolf Neugebauer, Phil Piwonka, and Diana-Maria Popa. 2020. Firecracker: Lightweight Virtualization for Serverless Applications. In Proceedings of USENIX NSDI. USENIX, Santa Clara, USA, 419--434."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_2_1","DOI":"10.1145\/3064176.3064186"},{"unstructured":"Amazon Web Services. 2024. AWS Nitro System: A Combination of Dedicated Hardware and Lightweight Hypervisor Enabling Faster Innovation and Enhanced Security. https:\/\/aws.amazon.com\/ec2\/nitro\/.","key":"e_1_3_2_1_3_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_4_1","DOI":"10.1145\/3411016.3411019"},{"unstructured":"Microsoft Azure. 2024. Azure CNI Collection. https:\/\/learn.microsoft.com\/en-us\/azure\/aks\/configure-azure-cni?tabs=configure-networking-portal.","key":"e_1_3_2_1_5_1"},{"unstructured":"Microsoft Azure. 2024. Azure CNI with Cilium. https:\/\/azure.microsoft.com\/en-us\/blog\/azure-cni-with-cilium-most-scalable-and-performant-container-networking-in-the-cloud\/.","key":"e_1_3_2_1_6_1"},{"unstructured":"Microsoft Azure. 2024. Cosmos DB. https:\/\/azure.microsoft.com\/en-us\/products\/cosmos-db.","key":"e_1_3_2_1_7_1"},{"unstructured":"Microsoft Azure. 2024 d. What is Azure Virtual Network? https:\/\/learn.microsoft.com\/en-us\/azure\/virtual-network\/virtual-networks-overview.","key":"e_1_3_2_1_8_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_9_1","DOI":"10.1145\/3337821.3337840"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_10_1","DOI":"10.1109\/EIT.2018.8500285"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_11_1","DOI":"10.1145\/3412841.3441887"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_12_1","DOI":"10.1145\/3472883.3486992"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_13_1","DOI":"10.1109\/CloudNet53349.2021.9657138"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_14_1","DOI":"10.1109\/CLOUD55607.2022.00033"},{"unstructured":"Alibaba Cloud. 2024. What is a VPC? https:\/\/www.alibabacloud.com\/help\/en\/vpc\/product-overview\/what-is-a-vpc.","key":"e_1_3_2_1_15_1"},{"unstructured":"Google Cloud. 2024. GCP CNI Collection. https:\/\/cloud.google.com\/kubernetes-engine\/docs\/concepts\/dataplane-v2.","key":"e_1_3_2_1_16_1"},{"unstructured":"Google Cloud. 2024. Virtual Private Cloud (VPC). https:\/\/cloud.google.com\/vpc?hl=en.","key":"e_1_3_2_1_17_1"},{"unstructured":"CNCF. 2024. CNCF Cloud Native Network. https:\/\/landscape.cncf.io\/card-mode?category=cloud-native-network&grouping=category.","key":"e_1_3_2_1_18_1"},{"unstructured":"CNCF. 2024. CNI (Container Network Interface) a Cloud Native Computing Foundation Project. https:\/\/www.cni.dev\/.","key":"e_1_3_2_1_19_1"},{"unstructured":"CNCF. 2024. CNI Plugins Project. https:\/\/github.com\/containernetworking\/plugins.","key":"e_1_3_2_1_20_1"},{"unstructured":"CNCF. 2024 d. Kube-OVN CNI. https:\/\/github.com\/kubeovn\/kube-ovn.","key":"e_1_3_2_1_21_1"},{"unstructured":"CNCF. 2024 e. Kubernetes: An Open-Source System for Automating Deployment Scaling and Management of Containerized Applications. https:\/\/kubernetes.io\/.","key":"e_1_3_2_1_22_1"},{"unstructured":"CNCF. 2024 f. Open vSwitch CNI. https:\/\/github.com\/k8snetworkplumbingwg\/ovs-cni.","key":"e_1_3_2_1_23_1"},{"unstructured":"Antrea Community. 2024. Antrea CNI. https:\/\/github.com\/antrea-io\/antrea.","key":"e_1_3_2_1_24_1"},{"unstructured":"Calico Community. 2024. Calico CNI Project. https:\/\/github.com\/projectcalico\/calico.","key":"e_1_3_2_1_25_1"},{"unstructured":"Cilium Community. 2024. Cilium CNI Project. https:\/\/github.com\/cilium\/cilium.","key":"e_1_3_2_1_26_1"},{"unstructured":"Containerd Community. 2024 d. Containerd: An Industry-Standard Container Runtime with An Emphasis on Simplicity Robustness and Portability. https:\/\/containerd.io\/.","key":"e_1_3_2_1_27_1"},{"unstructured":"Flannel Community. 2024 e. Flannel CNI Project. https:\/\/github.com\/flannel-io\/flannel.","key":"e_1_3_2_1_28_1"},{"unstructured":"Kata Community. 2024 f. Kata Containers: the Speed of Containers the Security of VMs. https:\/\/katacontainers.io\/.","key":"e_1_3_2_1_29_1"},{"volume-title":"2024 g","author":"Community PCI-SIG","unstructured":"PCI-SIG Community. 2024 g. PCI Special Interest Group. http:\/\/www.pcisig.com\/home.","key":"e_1_3_2_1_30_1"},{"unstructured":"Hewlett-Packard Corporation. 2024. Netperf. https:\/\/hewlettpackard.github.io\/netperf\/.","key":"e_1_3_2_1_31_1"},{"unstructured":"Intel Corporation. 2024. Scalable I\/O Virtualization Technical Specification. https:\/\/cdrdv2-public.intel.com\/671403\/intel-scalable-io-virtualization-technical-specification.pdf.","key":"e_1_3_2_1_32_1"},{"unstructured":"Intel Corporation. 2024. Userspace CNI. https:\/\/github.com\/intel\/userspace-cni-network-plugin.","key":"e_1_3_2_1_33_1"},{"unstructured":"Nokia Corporation. 2024 d. DANM CNI. https:\/\/github.com\/nokia\/danm.","key":"e_1_3_2_1_34_1"},{"unstructured":"Weaveworks Corporation. 2024 e. Weave Net CNI. https:\/\/github.com\/weaveworks\/weave.","key":"e_1_3_2_1_35_1"},{"key":"e_1_3_2_1_36_1","volume-title":"Proceedings of USENIX NSDI. USENIX","author":"Dalton Michael","year":"2018","unstructured":"Michael Dalton, David Schultz, Jacob Adriaens, Ahsan Arefin, Anshuman Gupta, Brian Fahs, Dima Rubinstein, Enrique Cauich Zermeno, Erik Rubow, James Alexander Docauer, et al. 2018. Andromeda: Performance, Isolation, and Velocity at Scale in Cloud Network Virtualization. In Proceedings of USENIX NSDI. USENIX, Boston, USA, 373--387."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_37_1","DOI":"10.1145\/3302424.3303984"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_38_1","DOI":"10.1145\/3373376.3378512"},{"unstructured":"eBPF Community. 2024. eBPF: Dynamically Program the Kernel for Efficient Networking Observability Tracing and Security. https:\/\/ebpf.io\/.","key":"e_1_3_2_1_39_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_40_1","DOI":"10.1109\/IPDPS53621.2022.00077"},{"key":"e_1_3_2_1_41_1","volume-title":"Proceedings of USENIX NSDI. USENIX","author":"Firestone Daniel","year":"2017","unstructured":"Daniel Firestone. 2017. VFP: A Virtual Switch Platform for Host SDN in the Public Cloud. In Proceedings of USENIX NSDI. USENIX, Boston, USA, 315--328."},{"key":"e_1_3_2_1_42_1","volume-title":"Proceedings of USENIX NSDI. USENIX","author":"Firestone Daniel","year":"2018","unstructured":"Daniel Firestone, Andrew Putnam, Sambhrama Mundkur, Derek Chiou, Alireza Dabagh, Mike Andrewartha, Hari Angepat, Vivek Bhanu, Adrian Caulfield, Eric Chung, et al. 2018. Azure Accelerated Networking: SmartNICs in the Public Cloud. In Proceedings of USENIX NSDI. USENIX, Boston, USA, 51--66."},{"key":"e_1_3_2_1_43_1","volume-title":"Proceedings of USENIX NSDI. USENIX","author":"Fouladi Sadjad","year":"2017","unstructured":"Sadjad Fouladi, Riad S. Wahby, Brennan Shacklett, Karthikeyan Vasuki Balasubramaniam, William Zeng, Rahul Bhalerao, Anirudh Sivaraman, George Porter, and Keith Winstein. 2017. Encoding, Fast and Slow: Low-Latency Video Processing Using Thousands of Tiny Threads. In Proceedings of USENIX NSDI. USENIX, Boston, USA, 363--376."},{"unstructured":"Linux Foundation. 2023. Open vSwitch Project. https:\/\/www.openvswitch.org\/.","key":"e_1_3_2_1_44_1"},{"unstructured":"Linux Foundation. 2024. Linux Perf. https:\/\/perf.wiki.kernel.org\/index.php\/Main_Page.","key":"e_1_3_2_1_45_1"},{"unstructured":"Linux Foundation. 2024. Linux systemd-analyze. https:\/\/man.archlinux.org\/man\/systemd-analyze.1.","key":"e_1_3_2_1_46_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_47_1","DOI":"10.1145\/3423211.3425683"},{"key":"e_1_3_2_1_48_1","volume-title":"Proceedings of USENIX OSDI. USENIX","author":"Gupta Vishal","year":"2023","unstructured":"Vishal Gupta, Kumar Kartikeya Dwivedi, Yugesh Kothari, Yueyang Pan, Diyu Zhou, and Sanidhya Kashyap. 2023. Ship your Critical Section, Not Your Data: Enabling Transparent Delegation with TCLOCKS. In Proceedings of USENIX OSDI. USENIX, Boston, USA, 1--16."},{"unstructured":"iPerf Community. 2024. iPerf - The ultimate speed test tool for TCP UDP and SCTP. https:\/\/iperf.fr.","key":"e_1_3_2_1_49_1"},{"unstructured":"Cisco Isovalent. 2024. Isovalent CNI. https:\/\/isovalent.com\/.","key":"e_1_3_2_1_50_1"},{"key":"e_1_3_2_1_51_1","volume-title":"Proceedings of IEEE Open Conference of Electrical, Electronic and Information Sciences. IEEE","author":"Kapovcius Nar\u016bunas","year":"2020","unstructured":"Nar\u016bunas Kapovcius. 2020. Performance Studies of Kubernetes Network Solutions. In Proceedings of IEEE Open Conference of Electrical, Electronic and Information Sciences. IEEE, Vilnius, Lithuania, 1--6."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_52_1","DOI":"10.1145\/3341301.3359629"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_53_1","DOI":"10.1145\/3341302.3342093"},{"volume-title":"Proceedings of IEEE International Conference on Electronics, Computing and Communication Technologies. IEEE","author":"Kumar Rakesh","unstructured":"Rakesh Kumar and B. Thangaraju. 2020. Performance Analysis between RunC and Kata Container Runtime. In Proceedings of IEEE International Conference on Electronics, Computing and Communication Technologies. IEEE, Bangalore, India, 1--4.","key":"e_1_3_2_1_54_1"},{"key":"e_1_3_2_1_55_1","volume-title":"Proceedings of ACM SOSP Poster). ACM","author":"Laforet Victor","year":"2023","unstructured":"Victor Laforet, Jean-Pierre Lozi, and Julia Lawall. 2023. BPF Hybrid Lock: Adaptive Synchronization for Multi-Core Processors. In Proceedings of ACM SOSP Poster). ACM, Koblenz, Germany, 1--8."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_56_1","DOI":"10.1109\/TCC.2022.3186397"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_57_1","DOI":"10.1145\/3447786.3456241"},{"key":"e_1_3_2_1_58_1","volume-title":"Proceedings of USENIX ATC. USENIX, Virtual Event, 727--740","author":"Li Huiba","year":"2020","unstructured":"Huiba Li, Yifan Yuan, Rui Du, Kai Ma, Lanzheng Liu, and Windsor Hsu. 2020. DADI: Block-Level Image Service for Agile and Elastic Application Deployment. In Proceedings of USENIX ATC. USENIX, Virtual Event, 727--740."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_59_1","DOI":"10.1145\/3651890.3672224"},{"key":"e_1_3_2_1_60_1","volume-title":"Proceedings of USENIX ATC. USENIX","author":"Li Zijun","year":"2022","unstructured":"Zijun Li, Jiagan Cheng, Quan Chen, Eryu Guan, Zizheng Bian, Yi Tao, Bin Zha, Qiang Wang, Weidong Han, and Minyi Guo. 2022. RunD: A Lightweight Secure Container Runtime for High-density Deployment and High-Concurrency Startup in Serverless Computing. In Proceedings of USENIX ATC. USENIX, Carlsbad, USA, 53--68."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_61_1","DOI":"10.11591\/ijece.v10i2.pp1507-1514"},{"key":"e_1_3_2_1_62_1","volume-title":"Proceedings of USENIX NSDI. USENIX","author":"Lin Shengkai","year":"2025","unstructured":"Shengkai Lin, Shizhen Zhao, Peirui Cao, Xinchi Han, Quan Tian, Wenfeng Liu, Qi Wu, Donghai Han, and Xinbin Wang. 2025. ONCache: A Cache-Based Low-Overhead Container Overlay Network. In Proceedings of USENIX NSDI. USENIX, Philadelphia, USA, 1--16."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_63_1","DOI":"10.1145\/3477113.3487273"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_64_1","DOI":"10.1145\/3299869.3314046"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_65_1","DOI":"10.1145\/3689031.3696066"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_66_1","DOI":"10.1145\/3302424.3303948"},{"unstructured":"Mallik Mahalingam Dinesh Dutt Kenneth Duda Puneet Agarwal Lawrence Kreeger T. Sridhar Mike Bursell and Chris Wright. 2024. RFC 7348: Virtual eXtensible Local Area Network (VXLAN): A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks. https:\/\/www.rfc-editor.org\/rfc\/rfc7348.html.","key":"e_1_3_2_1_67_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_68_1","DOI":"10.1145\/3132747.3132763"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_69_1","DOI":"10.1109\/CloudNet51028.2020.9335811"},{"key":"e_1_3_2_1_70_1","volume-title":"Proceedings of USENIX HotCloud. USENIX","author":"Sane Anup","year":"2019","unstructured":"Mohan, Anup and Sane, Harshad and Doshi, Kshitij and Edupuganti, Saikrishna and Nayak, Naren and Sukhomlinov, Vadim. 2019. Agile Cold Starts for Scalable Serverless. In Proceedings of USENIX HotCloud. USENIX, Renton, USA, 1--6."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_71_1","DOI":"10.1145\/3318464.3389758"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_72_1","DOI":"10.1145\/3479645.3479700"},{"key":"e_1_3_2_1_73_1","volume-title":"Proceedings of USENIX ATC. USENIX","author":"Oakes Edward","year":"2018","unstructured":"Edward Oakes, Leon Yang, Dennis Zhou, Kevin Houck, Tyler Harter, Andrea Arpaci-Dusseau, and Remzi Arpaci-Dusseau. 2018. SOCK: Rapid Task Provisioning with Serverless-Optimized Containers. In Proceedings of USENIX ATC. USENIX, Boston, USA, 57--70."},{"key":"e_1_3_2_1_74_1","volume-title":"Proceedings of USENIX OSDI. USENIX","author":"Park Sujin","year":"2022","unstructured":"Sujin Park, Diyu Zhou, Yuchen Qian, Irina Calciu, Taesoo Kim, and Sanidhya Kashyap. 2022. Application-Informed Kernel Synchronization Primitives. In Proceedings of USENIX OSDI. USENIX, Carlsbad, USA, 667--682."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_75_1","DOI":"10.1109\/ICTC.2018.8539382"},{"key":"e_1_3_2_1_76_1","volume-title":"Proceedings of USENIX ATC. USENIX","author":"Peng Bo","year":"2018","unstructured":"Bo Peng, Haozhong Zhang, Jianguo Yao, Yaozu Dong, Yu Xu, and Haibing Guan. 2018. MDev-NVMe: A NVMe Storage Virtualization Solution with Mediated Pass-Through. In Proceedings of USENIX ATC. USENIX, Vancouver, Canada, 665--676."},{"key":"e_1_3_2_1_77_1","volume-title":"Proceedings of USENIX NSDI. USENIX","author":"Pfaff Ben","year":"2015","unstructured":"Ben Pfaff, Justin Pettit, Teemu Koponen, Ethan Jackson, Andy Zhou, Jarno Rajahalme, Jesse Gross, Alex Wang, Joe Stringer, Pravin Shelar, et al. 2015. The Design and Implementation of Open vSwitch. In Proceedings of USENIX NSDI. USENIX, Santa Clara, USA, 117--130."},{"key":"e_1_3_2_1_78_1","volume-title":"Proceedings of USENIX NSDI. USENIX Association","author":"Pu Qifan","year":"2019","unstructured":"Qifan Pu, Shivaram Venkataraman, and Ion Stoica. 2019. Shuffling, Fast and Slow: Scalable Analytics on Serverless Infrastructure. In Proceedings of USENIX NSDI. USENIX Association, Boston, USA, 193--206."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_79_1","DOI":"10.1109\/TNSM.2020.3047545"},{"unstructured":"Murali Reddy. 2024. Kube-router CNI. https:\/\/github.com\/cloudnativelabs\/kube-router.","key":"e_1_3_2_1_80_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_81_1","DOI":"10.1145\/3503222.3507750"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_82_1","DOI":"10.1145\/3284028.3284029"},{"unstructured":"Amazon Web Services. 2024. AWS CNI Collection. https:\/\/docs.aws.amazon.com\/eks\/latest\/userguide\/managing-vpc-cni.html.","key":"e_1_3_2_1_83_1"},{"unstructured":"Amazon Web Services. 2024. AWS Lambda. https:\/\/aws.amazon.com\/lambda\/.","key":"e_1_3_2_1_84_1"},{"unstructured":"Amazon Web Services. 2024. What is Amazon VPC? https:\/\/docs.aws.amazon.com\/vpc\/latest\/userguide\/what-is-amazon-vpc.html.","key":"e_1_3_2_1_85_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_86_1","DOI":"10.1109\/JPROC.2015.2494218"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_87_1","DOI":"10.1145\/3409334.3452040"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_88_1","DOI":"10.1109\/Cluster48925.2021.00018"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_89_1","DOI":"10.1109\/INFOCOM.2018.8485865"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_90_1","DOI":"10.1145\/1693453.1693489"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_91_1","DOI":"10.1145\/3419111.3421275"},{"key":"e_1_3_2_1_92_1","volume-title":"Nehal Bandi, Bhushan Jain, William Jannen, Jitin John, Harry A. Kalodner, Vrushali Kulkarni, Daniela Oliveira, and Donald E. Porter.","author":"Tsai Chia-Che","year":"2014","unstructured":"Chia-Che Tsai, Kumar Saurabh Arora, Nehal Bandi, Bhushan Jain, William Jannen, Jitin John, Harry A. Kalodner, Vrushali Kulkarni, Daniela Oliveira, and Donald E. Porter. 2014. Cooperation and Security Isolation of Library OSes for Multi-Process Applications. In Proceedings of ACM Eurosys. ACM, Amsterdam, The Netherlands, 1--14."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_93_1","DOI":"10.1145\/3452296.3472914"},{"unstructured":"tungsten Fabric Community. 2024. Tungsten Fabric CNI. https:\/\/github.com\/tungstenfabric\/tf-controller.","key":"e_1_3_2_1_94_1"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_95_1","DOI":"10.1007\/s10586-021-03517-8"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_96_1","DOI":"10.1145\/3603269.3604859"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_97_1","DOI":"10.1016\/j.future.2024.01.029"},{"key":"e_1_3_2_1_98_1","first-page":"1","article-title":"RTNL Mutex, the Network Stack Big Kernel Lock","volume":"2","author":"Westphal Florian","year":"2017","unstructured":"Florian Westphal. 2017. RTNL Mutex, the Network Stack Big Kernel Lock. Proceedings of Netdev, Vol. 2 (2017), 1--4.","journal-title":"Proceedings of Netdev"},{"unstructured":"Wikipedia. 2024. Generic Network Virtualization Encapsulation. https:\/\/en.wikipedia.org\/wiki\/Generic_Network_Virtualization_Encapsulation.","key":"e_1_3_2_1_99_1"},{"key":"e_1_3_2_1_100_1","volume-title":"Proceedings of USENIX HotCloud. USENIX","author":"Williams Dan","year":"2016","unstructured":"Dan Williams and Ricardo Koller. 2016. Unikernel Monitors: Extending Minimalism outside of the Box. In Proceedings of USENIX HotCloud. USENIX, Denvor, USA, 71--76."},{"key":"e_1_3_2_1_101_1","volume-title":"High-Throughput Inference. In Proceedings of ACM ASPLOS. ACM","author":"Yang Yanan","year":"2022","unstructured":"Yanan Yang, Laiping Zhao, Yiming Li, Huanyu Zhang, Jie Li, Mingyang Zhao, Xingzhen Chen, and Keqiu Li. 2022. INFless: A Native Serverless System for Low-Latency, High-Throughput Inference. In Proceedings of ACM ASPLOS. ACM, Lausanne, Switzerland, 768--781."},{"key":"e_1_3_2_1_102_1","volume-title":"Arpaci-Dusseau","author":"Young Ethan G.","year":"2019","unstructured":"Ethan G. Young, Pengfei Zhu, Tyler Caraza-Harter, Andrea C. Arpaci-Dusseau, and Remzi H. Arpaci-Dusseau. 2019. The True Cost of Containing: A gVisor Case Study. In Proceedings of USENIX HotCloud. USENIX, Renton, USA."},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_103_1","DOI":"10.1145\/2931037.2931070"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_104_1","DOI":"10.1109\/CyberC.2017.78"},{"volume-title":"Proceedings of ACM SIGCOMM HotConNet Workshop. ACM","author":"Zhao Yang","unstructured":"Yang Zhao, Nai Xia, Chen Tian, Bo Li, Yizhou Tang, Yi Wang, Gong Zhang, Rui Li, and Alex X. Liu. 2017. Performance of Container Networking Technologies. In Proceedings of ACM SIGCOMM HotConNet Workshop. ACM, Los Angeles, USA, 1--6.","key":"e_1_3_2_1_105_1"},{"key":"e_1_3_2_1_106_1","volume-title":"Proceedings of ACM ASPLOS. ACM","author":"Zhou Zhuangzhuang","year":"2023","unstructured":"Zhuangzhuang Zhou, Yanqi Zhang, and Christina Delimitrou. 2023. Aquatope: QoS-and-Uncertainty-Aware Resource Management for Multi-Stage Serverless Workflows. In Proceedings of ACM ASPLOS. ACM, Vancouver, Canada, 1--14."},{"key":"e_1_3_2_1_107_1","volume-title":"Proceedings of USENIX NSDI. USENIX","author":"Zhuo Danyang","year":"2019","unstructured":"Danyang Zhuo, Kaiyuan Zhang, Yibo Zhu, Hongqiang Harry Liu, Matthew Rockett, Arvind Krishnamurthy, and Thomas Anderson. 2019. Slim: OS Kernel Support for a Low-Overhead Container Overlay Network. In Proceedings of USENIX NSDI. USENIX, Boston, USA, 331--344."}],"event":{"sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication"],"acronym":"IMC '24","name":"IMC '24: ACM Internet Measurement Conference","location":"Madrid Spain"},"container-title":["Proceedings of the 2024 ACM on Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3646547.3688436","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3646547.3688436","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T11:50:10Z","timestamp":1755863410000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3646547.3688436"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11,4]]},"references-count":107,"alternative-id":["10.1145\/3646547.3688436","10.1145\/3646547"],"URL":"https:\/\/doi.org\/10.1145\/3646547.3688436","relation":{},"subject":[],"published":{"date-parts":[[2024,11,4]]},"assertion":[{"value":"2024-11-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}