{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,25]],"date-time":"2026-04-25T08:36:20Z","timestamp":1777106180177,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":69,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,8,4]],"date-time":"2024-08-04T00:00:00Z","timestamp":1722729600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Key R&D Program of Zhejiang Province","award":["2023R5202"],"award-info":[{"award-number":["2023R5202"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,8,4]]},"DOI":"10.1145\/3651890.3672221","type":"proceedings-article","created":{"date-parts":[[2024,7,31]],"date-time":"2024-07-31T13:11:43Z","timestamp":1722431503000},"page":"860-875","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":21,"title":["Canal Mesh: A Cloud-Scale Sidecar-Free Multi-Tenant Service Mesh Architecture"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4442-2817","authenticated-orcid":false,"given":"Enge","family":"Song","sequence":"first","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-2611-757X","authenticated-orcid":false,"given":"Yang","family":"Song","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-0154-5622","authenticated-orcid":false,"given":"Chengyun","family":"Lu","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7718-0669","authenticated-orcid":false,"given":"Tian","family":"Pan","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-0904-8031","authenticated-orcid":false,"given":"Shaokai","family":"Zhang","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2502-8686","authenticated-orcid":false,"given":"Jianyuan","family":"Lu","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-9424-105X","authenticated-orcid":false,"given":"Jiangu","family":"Zhao","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-6646-5203","authenticated-orcid":false,"given":"Xining","family":"Wang","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-5275-226X","authenticated-orcid":false,"given":"Xiaomin","family":"Wu","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1578-6005","authenticated-orcid":false,"given":"Minglan","family":"Gao","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-8313-7933","authenticated-orcid":false,"given":"Zongquan","family":"Li","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-5436-2886","authenticated-orcid":false,"given":"Ziyang","family":"Fang","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8096-5528","authenticated-orcid":false,"given":"Biao","family":"Lyu","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"},{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-9646-8407","authenticated-orcid":false,"given":"Pengyu","family":"Zhang","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-6384-1165","authenticated-orcid":false,"given":"Rong","family":"Wen","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8072-2155","authenticated-orcid":false,"given":"Li","family":"Yi","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-7124-6705","authenticated-orcid":false,"given":"Zhigang","family":"Zong","sequence":"additional","affiliation":[{"name":"Alibaba Cloud, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7756-0952","authenticated-orcid":false,"given":"Shunmin","family":"Zhu","sequence":"additional","affiliation":[{"name":"Tsinghua University, Beijing, China"},{"name":"Alibaba Cloud, Beijing, China"}]}],"member":"320","published-online":{"date-parts":[[2024,8,4]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2018. Istio Soft Multi-Tenancy Support. https:\/\/istio.io\/v1. \/2018\/soft-multitenancy. (2018). blog"},{"key":"e_1_3_2_1_2_1","unstructured":"2021. Benchmarking Linkerd and Istio. https:\/\/linkerd.io\/2021\/05\/27\/linkerd-vs-istio-benchmarks\/#latency-at-20-rps. (2021)."},{"key":"e_1_3_2_1_3_1","unstructured":"2021. How eBPF Streamlines the Service Mesh. https:\/\/thenewstack.io\/how-ebpf-streamlines-the-service-mesh. (2021)."},{"key":"e_1_3_2_1_4_1","unstructured":"2021. How eBPF will solve Service Mesh - Goodbye Sidecars. https:\/\/isovalent.com\/blog\/post\/2021-12-08-ebpf-servicemesh\/#sidecar-vs-per-node-proxy. (2021)."},{"key":"e_1_3_2_1_5_1","unstructured":"2021. Sidecar Concept In 3 Minutes. https:\/\/medium.com\/code-factory-berlin\/sidecar-concept-in-2-minutes-a9f834cffe6f. (2021)."},{"key":"e_1_3_2_1_6_1","unstructured":"2022. A Comprehensive Guide to Canary Releases. https:\/\/www.getambassador.io\/blog\/comprehensive-guide-to-canary-releases. (2022)."},{"key":"e_1_3_2_1_7_1","unstructured":"2022. Ambient version. https:\/\/gcsweb.istio.io\/gcs\/istio-build\/dev\/0.0.0-ambient.191fe680b52c1754ee72a06b3e0d3f9d116f2e82. (2022)."},{"key":"e_1_3_2_1_8_1","volume-title":"CNCF 2022 Annual Survey. https:\/\/www.cncf.io\/reports\/cncf-annual-survey-2022","year":"2022","unstructured":"2022. CNCF 2022 Annual Survey. https:\/\/www.cncf.io\/reports\/cncf-annual-survey-2022. (2022)."},{"key":"e_1_3_2_1_9_1","unstructured":"2022. Introducing Ambient Mesh. https:\/\/istio.io\/latest\/blog\/2022\/introducing-ambient-mesh. (2022)."},{"key":"e_1_3_2_1_10_1","unstructured":"2022. Traffic types and iptables rules in Istio sidecar explained. https:\/\/tetrate.io\/traffic-types-and-iptables-rules-in-istio-sidecar-explained. (2022)."},{"key":"e_1_3_2_1_11_1","unstructured":"2023. Accelerate Microservice Networking Performance with 4th Gen Intel Xeon Scalable Processor. https:\/\/networkbuilders.intel.com\/solutionslibrary\/microservices-solution-optimizations-with-intel-xeon-scalable-processor-solution-brief. (2023)."},{"key":"e_1_3_2_1_12_1","unstructured":"2023. Cilium Service Mesh - Everything You Need to Know. https:\/\/isovalent.com\/blog\/post\/cilium-service-mesh. (2023)."},{"key":"e_1_3_2_1_13_1","unstructured":"2023. Elastic Compute Service price in Ali cloud. https:\/\/www.alibabacloud.com\/en\/product. (2023)."},{"key":"e_1_3_2_1_14_1","unstructured":"2023. Getting Started with Multi-tenancy and Routing Delegation in Gloo Platform. https:\/\/www.solo.io\/blog\/multi-tenancy-routing-gloo-gateway. (2023)."},{"key":"e_1_3_2_1_15_1","unstructured":"2023. Istio 1.17.0. https:\/\/github.com\/istio\/istio\/releases\/tag\/1.17.0. (2023)."},{"key":"e_1_3_2_1_16_1","unstructured":"2023. Istio Ambient Waypoint Proxy Made Simple. https:\/\/istio.io\/latest\/blog\/2023\/waypoint-proxy-made-simple. (2023)."},{"key":"e_1_3_2_1_17_1","unstructured":"2024. Accelerating OpenSSL Using Intel QuickAssist Technology. https:\/\/www.intel.com\/content\/dam\/www\/public\/us\/en\/documents\/solution-briefs\/accelerating-openssl-brief.pdf. (2024)."},{"key":"e_1_3_2_1_18_1","unstructured":"2024. Addressing Cascading Failures. https:\/\/sre.google\/sre-book\/addressing-cascading-failures\/. (2024)."},{"key":"e_1_3_2_1_19_1","unstructured":"2024. Alibaba Cloud Service Mesh. https:\/\/www.alibabacloud.com\/product\/servicemesh. (2024)."},{"key":"e_1_3_2_1_20_1","unstructured":"2024. AWS App Mesh. https:\/\/aws.amazon.com\/app-mesh. (2024)."},{"key":"e_1_3_2_1_21_1","unstructured":"2024. Azure Service Fabric. https:\/\/azure.microsoft.com\/en-us\/products\/service-fabric. (2024)."},{"key":"e_1_3_2_1_22_1","unstructured":"2024. Calico CNI plugin. https:\/\/github.com\/projectcalico\/calico. (2024)."},{"key":"e_1_3_2_1_23_1","unstructured":"2024. Cilium Service Mesh. https:\/\/cilium.io\/use-cases\/service-mesh. (2024)."},{"key":"e_1_3_2_1_24_1","unstructured":"2024. Crypto Accelerations in Istio and Envoy with Intel Xeon Scalable Processors. https:\/\/networkbuilders.intel.com\/solutionslibrary\/service-mesh-crypto-accelerations-istio-envoy-intel-xeon-sp-user-guide. (2024)."},{"key":"e_1_3_2_1_25_1","unstructured":"2024. eBPF. https:\/\/ebpf.io. (2024)."},{"key":"e_1_3_2_1_26_1","unstructured":"2024. Envoy is an open source edge and service proxy designed for cloud-native applications. https:\/\/www.envoyproxy.io. (2024)."},{"key":"e_1_3_2_1_27_1","unstructured":"2024. Flannel CNI plugin. https:\/\/github.com\/flannel-io\/flannel. (2024)."},{"key":"e_1_3_2_1_28_1","unstructured":"2024. Google Cloud Service Mesh. https:\/\/cloud.google.com\/products\/service-mesh. (2024)."},{"key":"e_1_3_2_1_29_1","unstructured":"2024. Iptables Redirection. https:\/\/release-v1-2.docs.openservicemesh.io\/docs\/guides\/traffic_management\/iptables_redirection. (2024)."},{"key":"e_1_3_2_1_30_1","unstructured":"2024. Istio: simplify observability traffic management security and policy with the leading service mesh. https:\/\/istio.io. (2024)."},{"key":"e_1_3_2_1_31_1","unstructured":"2024. Kubernetes. https:\/\/kubernetes.io. (2024)."},{"key":"e_1_3_2_1_32_1","unstructured":"2024. Linkerd: the world's most advanced service mesh. https:\/\/linkerd.io. (2024)."},{"key":"e_1_3_2_1_33_1","unstructured":"2024. NAT Gateway. https:\/\/www.alibabacloud.com\/product\/nat. (2024)."},{"key":"e_1_3_2_1_34_1","unstructured":"2024. Netperf. https:\/\/github.com\/HewlettPackard\/netperf. (2024)."},{"key":"e_1_3_2_1_35_1","unstructured":"2024. Overview of ENIs. https:\/\/www.alibabacloud.com\/help\/en\/ecs\/user-guide\/overview-48. (2024)."},{"key":"e_1_3_2_1_36_1","unstructured":"2024. Server Load Balancer. https:\/\/www.alibabacloud.com\/product\/server-load-balancer. (2024)."},{"key":"e_1_3_2_1_37_1","unstructured":"2024. Sidecar Containers in Kubernetes Pods. https:\/\/www.baeldung.com\/linux\/kubernetes-pods-sidecar-containers. (2024)."},{"key":"e_1_3_2_1_38_1","unstructured":"2024. What is Istio Ambient Mode? https:\/\/www.solo.io\/topics\/istio\/ambient-mode. (2024)."},{"key":"e_1_3_2_1_39_1","unstructured":"2024. Workload isolation using shuffle-sharding. https:\/\/aws.amazon.com\/builders-library\/workload-isolation-using-shuffle-sharding. (2024)."},{"key":"e_1_3_2_1_40_1","unstructured":"2024. wrk - a HTTP benchmarking tool. https:\/\/github.com\/wg\/wrk. (2024)."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373360.3380834"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3484266.3487379"},{"key":"e_1_3_2_1_43_1","volume-title":"20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23)","author":"Bansal Deepak","year":"2023","unstructured":"Deepak Bansal, Gerald DeGrace, Rishabh Tewari, Michal Zygmunt, James Grantham, Silvano Gai, Mario Baldi, Krishna Doddapaneni, Arun Selvarajan, Arunkumar Arumugam, et al. 2023. Disaggregating stateful network functions. In 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23). 1469--1487."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2015.9.4.27"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2017.52"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/2656877.2656890"},{"key":"e_1_3_2_1_47_1","volume-title":"Istio: Up and running: Using a service mesh to connect, secure, control, and observe","author":"Calcote Lee","year":"2019","unstructured":"Lee Calcote and Zack Butcher. 2019. Istio: Up and running: Using a service mesh to connect, secure, control, and observe. O'Reilly Media."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3485983.3494867"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICC40277.2020.9149045"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/3422604.3425944"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/3551902.3551962"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2787496"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"crossref","unstructured":"C Hopps. 2000. RFC 2992: Analysis of an Equal-Cost Multi-Path Algorithm. (2000).","DOI":"10.17487\/rfc2992"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-33702-5_12"},{"key":"e_1_3_2_1_55_1","volume-title":"Lyft's Envoy: Experiences Operating a Large Service Mesh","author":"Klein Matt","unstructured":"Matt Klein. 2017. Lyft's Envoy: Experiences Operating a Large Service Mesh. USENIX Association, San Francisco, CA."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"crossref","unstructured":"M Mahalingam D Dutt K Duda P Agarwal L Kreeger T Sridhar M Bursell and C Wright. 2014. RFC 7348: Virtual eXtensible Local Area Network (VXLAN): A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks. (2014).","DOI":"10.17487\/rfc7348"},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"crossref","unstructured":"John Nagle. 1984. RFC 896: Congestion Control in IP\/TCP Internetworks. (1984).","DOI":"10.17487\/rfc0896"},{"key":"e_1_3_2_1_58_1","volume-title":"15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18)","author":"Olteanu Vladimir","year":"2018","unstructured":"Vladimir Olteanu, Alexandru Agache, Andrei Voinescu, and Costin Raiciu. 2018. Stateless datacenter load-balancing with beamer. In 15th USENIX Symposium on Networked Systems Design and Implementation (NSDI 18). 125--139."},{"key":"e_1_3_2_1_59_1","volume-title":"21st USENIX Symposium on Networked Systems Design and Implementation (NSDI 24)","author":"Pan Tian","year":"2024","unstructured":"Tian Pan, Kun Liu, Xionglie Wei, Yisong Qiao, Jun Hu, Zhiguo Li, Jun Liang, Tiesheng Cheng, Wenqiang Su, Jie Lu, et al. 2024. {LuoShen}: A {Hyper-Converged} Programmable Gateway for {Multi-Tenant}{Multi-Service} Edge Clouds. In 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI 24). 877--892."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/3452296.3472889"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3544216.3544259"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"crossref","unstructured":"Eric Rescorla. 2018. RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3. (2018).","DOI":"10.17487\/RFC8446"},{"key":"e_1_3_2_1_63_1","volume-title":"17th USENIX Symposium on Operating Systems Design and Implementation (OSDI 23)","author":"Saokar Harshit","year":"2023","unstructured":"Harshit Saokar, Soteris Demetriou, Nick Magerko, Max Kontorovich, Josh Kirstein, Margot Leibold, Dimitrios Skarlatos, Hitesh Khandelwal, and Chunqiang Tang. 2023. {ServiceRouter}: Hyperscale and Minimal Cost Service Mesh at Meta. In 17th USENIX Symposium on Operating Systems Design and Implementation (OSDI 23). 969--985."},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1086\/466541"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"publisher","DOI":"10.1145\/3603269.3604859"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM42981.2021.9488670"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1145\/3555050.3569116"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1145\/3626111.3628178"},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620678.3624652"}],"event":{"name":"ACM SIGCOMM '24: ACM SIGCOMM 2024 Conference","location":"Sydney NSW Australia","acronym":"ACM SIGCOMM '24","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the ACM SIGCOMM 2024 Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3651890.3672221","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3651890.3672221","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T17:49:12Z","timestamp":1750268952000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3651890.3672221"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,8,4]]},"references-count":69,"alternative-id":["10.1145\/3651890.3672221","10.1145\/3651890"],"URL":"https:\/\/doi.org\/10.1145\/3651890.3672221","relation":{},"subject":[],"published":{"date-parts":[[2024,8,4]]},"assertion":[{"value":"2024-08-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}