{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,13]],"date-time":"2026-02-13T17:06:48Z","timestamp":1771002408337,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":51,"publisher":"ACM","funder":[{"name":"JSPS KAKENHI","award":["23KJ1329"],"award-info":[{"award-number":["23KJ1329"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,8,9]]},"DOI":"10.1145\/3674213.3674221","type":"proceedings-article","created":{"date-parts":[[2026,2,13]],"date-time":"2026-02-13T16:12:42Z","timestamp":1770999162000},"page":"67-75","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["bypass4netns: Accelerating TCP\/IP Communications in Rootless Containers"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4497-3459","authenticated-orcid":false,"given":"Naoki","family":"Matsumoto","sequence":"first","affiliation":[{"name":"Kyoto University, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2508-6633","authenticated-orcid":false,"given":"Akihiro","family":"Suda","sequence":"additional","affiliation":[{"name":"NTT R&D, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,8,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2020. etcd (3.3.25). https:\/\/etcd.io\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_2_1","unstructured":"2020. nginx (1.18). https:\/\/nginx.org\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_3_1","unstructured":"2020. sysbench (1.0.20). https:\/\/github.com\/akopytov\/sysbench. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_4_1","unstructured":"2023. etcd\/tools\/benchmark (3.3.25). https:\/\/github.com\/etcd-io\/etcd\/tree\/main\/tools\/benchmark. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_5_1","unstructured":"2023. iperf3 (3.16). https:\/\/iperf.fr\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_6_1","unstructured":"2023. memcached (1.6.22). https:\/\/memcached.org\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_7_1","unstructured":"2023. memtier_benchmark (2.0.0). https:\/\/github.com\/RedisLabs\/memtier_benchmark. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_8_1","unstructured":"2023. MySQL (8.2.0). https:\/\/www.mysql.com\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_9_1","unstructured":"2023. net\/http - Go Packages (Go 1.21.3). https:\/\/pkg.go.dev\/net\/http. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_10_1","unstructured":"2023. pgbench (16.1). https:\/\/www.postgresql.org\/docs\/16\/pgbench.html. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_11_1","unstructured":"2023. PostgreSQL (16.1). https:\/\/www.postgresql.org\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_12_1","unstructured":"2023. RabbitMQ (3.12.10). https:\/\/www.rabbitmq.com\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_13_1","unstructured":"2023. rabbitmq-perf-tester (2.20.0). https:\/\/github.com\/rabbitmq\/rabbitmq-perf-test. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_14_1","unstructured":"2023. Redis (7.2.3). https:\/\/redis.io\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_15_1","unstructured":"2023. Redis benchmark (7.2.3). https:\/\/redis.io\/docs\/latest\/operate\/oss_and_stack\/management\/optimization\/benchmarks\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_16_1","unstructured":"2024. apt (2.4.12). https:\/\/salsa.debian.org\/apt-team\/apt. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD55607.2022.00033"},{"key":"e_1_3_2_1_18_1","unstructured":"Cloud Native Computing Foundation. 2014. Kubernetes. https:\/\/github.com\/kubernetes\/kubernetes. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_19_1","unstructured":"Cloud Native Computing Foundation. 2024. Cluster Networking | Kubernetes. https:\/\/kubernetes.io\/docs\/concepts\/cluster-administration\/networking\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_20_1","unstructured":"Cloud Native Computing Foundation. 2024. Service | Kubernetes. https:\/\/kubernetes.io\/docs\/concepts\/services-networking\/service\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_21_1","unstructured":"Common Weakness Enumeration. 2006. CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition. https:\/\/cwe.mitre.org\/data\/definitions\/367.html. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_22_1","unstructured":"Michael Crosby 2014. runc. https:\/\/github.com\/opencontainers\/runc\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_23_1","unstructured":"Michael Crosby 2016. containerd. https:\/\/github.com\/containerd\/containerd. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_24_1","unstructured":"dlezcano 2008. LXC - Linux Containers. https:\/\/github.com\/lxc\/lxc. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_25_1","unstructured":"dmcgowan. 2018. archive: check whiteout path before removal. https:\/\/github.com\/containerd\/containerd\/pull\/2001. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_26_1","unstructured":"flannel-io. 2014. flannel. https:\/\/github.com\/flannel-io\/flannel. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_27_1","unstructured":"giuseppe. 2019. rootfs: umount all procfs and sysfs with \u2013no-pivot. https:\/\/github.com\/opencontainers\/runc\/pull\/1962. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_28_1","unstructured":"Serge Hallyn 2013. lxc-user-nic. https:\/\/github.com\/lxc\/lxc\/blob\/master\/doc\/lxc-user-nic.sgml.in. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_29_1","volume-title":"10th USENIX Symposium on Operating Systems Design and Implementation (OSDI 12)","author":"Han Sangjin","year":"2012","unstructured":"Sangjin Han, Scott Marshall, Byung-Gon Chun, and Sylvia Ratnasamy. 2012. MegaPipe: A New Programming Interface for Scalable Network I\/O. In 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI 12). USENIX Association, Hollywood, CA, 135\u2013148."},{"key":"e_1_3_2_1_30_1","volume-title":"11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14)","author":"Jeong EunYoung","year":"2014","unstructured":"EunYoung Jeong, Shinae Wood, Muhammad Jamshed, Haewon Jeong, Sunghwan Ihm, Dongsu Han, and KyoungSoo Park. 2014. mTCP: a Highly Scalable User-level TCP Stack for Multicore Systems. In 11th USENIX Symposium on Networked Systems Design and Implementation (NSDI 14). USENIX Association, Seattle, WA, 489\u2013502."},{"key":"e_1_3_2_1_31_1","unstructured":"Michael Kerrisk 2021. seccomp(2). https:\/\/man7.org\/linux\/man-pages\/man2\/seccomp.2.html. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_32_1","unstructured":"Michael Kerrisk 2021. seccomp_unotify(2). https:\/\/man7.org\/linux\/man-pages\/man2\/seccomp_unotify.2.html. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_33_1","unstructured":"Shengkai Lin Peirui Cao Tianyi Huang Shizhen Zhao Quan Tian Qi Wu Donghai Han Xinbing Wang and Chenghu Zhou. 2023. XMasq: Low-Overhead Container Overlay Network Based on eBPF. arxiv:2305.05455\u00a0[cs.NI]"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","unstructured":"Xin Lin Lingguang Lei Yuewu Wang Jiwu Jing Kun Sun and Quan Zhou. 2018. A Measurement Study on Linux Container Security: Attacks and Countermeasures(ACSAC \u201918). ACM 418\u2013429. https:\/\/doi.org\/10.1145\/3274694.3274720","DOI":"10.1145\/3274694.3274720"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","unstructured":"Mallik Mahalingam Dinesh Dutt Kenneth Duda Puneet Agarwal Larry Kreeger T. Sridhar Mike Bursell and Chris Wright. 2014. Virtual eXtensible Local Area Network (VXLAN): A Framework for Overlaying Virtualized Layer 2 Networks over Layer 3 Networks. RFC 7348. https:\/\/doi.org\/10.17487\/RFC7348","DOI":"10.17487\/RFC7348"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3230718.3230723"},{"key":"e_1_3_2_1_37_1","first-page":"2017","volume":"201","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 2017. CVE-2017-5985. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2017-5985. (2017). [Accessed on 5\/17\/2024].","journal-title":"Technology."},{"key":"e_1_3_2_1_38_1","first-page":"2018","volume":"201","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 2018. CVE-2018-6556. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2018-6556. [Accessed on 5\/17\/2024].","journal-title":"Technology."},{"key":"e_1_3_2_1_39_1","first-page":"2019","volume":"201","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 2019. CVE-2019-14271. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-14271. [Accessed on 5\/17\/2024].","journal-title":"Technology."},{"key":"e_1_3_2_1_40_1","first-page":"2019","volume":"201","author":"National Institute of Standards and","unstructured":"National Institute of Standards and Technology. 2019. CVE-2019-5736. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-5736. [Accessed on 5\/17\/2024].","journal-title":"Technology."},{"key":"e_1_3_2_1_41_1","unstructured":"Project Calico. 2014. Calico. https:\/\/github.com\/projectcalico\/calico. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3544216.3544259"},{"key":"e_1_3_2_1_43_1","unstructured":"Aleksa Sarai 2017. Rootless Containers. https:\/\/rootlesscontaine.rs\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_44_1","unstructured":"Itay Shakury 2019. tracee. https:\/\/github.com\/aquasecurity\/tracee. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_45_1","first-page":"2020","volume":"202","unstructured":"Akihiro Suda. 2020. [CVE-2020\u201315257] Don\u2019t use \u2013net=host. Don\u2019t use spec.hostNetwork.https:\/\/medium.com\/nttlabs\/dont-use-host-network-namespace-f548aeeef575.","journal-title":"Akihiro Suda."},{"key":"e_1_3_2_1_46_1","unstructured":"Akihiro Suda. 2024. Usernetes Gen2 - Kubernetes in Rootless Docker with Multiple Nodes. https:\/\/github.com\/AkihiroSuda\/AkihiroSuda\/blob\/master\/slides\/2024\/20240415. [Accessed on 6\/24\/2024]."},{"key":"e_1_3_2_1_47_1","unstructured":"Akihiro Suda 2018. RootlessKit. https:\/\/github.com\/rootless-containers\/rootlesskit. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_48_1","unstructured":"Akihiro Suda 2018. slirp4netns. https:\/\/github.com\/rootless-containers\/slirp4netns. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_49_1","unstructured":"Akihiro Suda 2018. Usernetes. https:\/\/github.com\/rootless-containers\/usernetes. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_50_1","unstructured":"Akihiro Suda 2020. nerdctl. https:\/\/github.com\/containerd\/nerdctl\/. [Accessed on 5\/17\/2024]."},{"key":"e_1_3_2_1_51_1","volume-title":"Slim: OS Kernel Support for a Low-Overhead Container Overlay Network. In NSDI 19. USENIX, 331\u2013344.","author":"Zhuo Danyang","year":"2019","unstructured":"Danyang Zhuo, Kaiyuan Zhang, Yibo Zhu, Hongqiang\u00a0Harry Liu, Matthew Rockett, Arvind Krishnamurthy, and Thomas Anderson. 2019. Slim: OS Kernel Support for a Low-Overhead Container Overlay Network. In NSDI 19. USENIX, 331\u2013344."}],"event":{"name":"AINTEC '24: Asian Internet Engineering Conference 2024","location":"Sydney NSW Australia","acronym":"AINTEC '24","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the 19th Asian Internet Engineering Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3674213.3674221","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,13]],"date-time":"2026-02-13T16:13:27Z","timestamp":1770999207000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3674213.3674221"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,8,9]]},"references-count":51,"alternative-id":["10.1145\/3674213.3674221","10.1145\/3674213"],"URL":"https:\/\/doi.org\/10.1145\/3674213.3674221","relation":{},"subject":[],"published":{"date-parts":[[2024,8,9]]},"assertion":[{"value":"2024-08-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}