article thumbnail

AWS EC2 Virtualization 2017: Introducing Nitro

Brendan Gregg

In this configuration, the AMI and boot is paravirt (PV), the kernel is making hypercalls instead of privileged instructions, and the system is using paravirt network and storage drivers. But not all workloads: some are network bound (proxies) and storage bound (databases). ## 5. AWS called this [enhanced networking].

article thumbnail

Engineering a Studio Quality Experience With High-Quality Audio at Netflix

The Netflix TechBlog

In late 2017, we received some critical feedback from the brothers on the Stranger Things 2 audio mix: in some scenes, there was a reduced sense of where sounds are located in the 5.1-channel This approach selects the audio bitrate based on network conditions at the start of playback. Media is provided in several qualities.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Evolving Container Security With Linux User Namespaces

The Netflix TechBlog

In addition to the default Docker namespaces (mount, network, UTS, IPC, and PID), we employ user namespaces for added layers of isolation. Road to Implementation We began work to enable user namespaces in early 2017. Notice how no privilege escalation mechanism was used to perform any of these actions.

Media 297
article thumbnail

Building Netflix’s Distributed Tracing Infrastructure

The Netflix TechBlog

Reconstructing a streaming session was a tedious and time consuming process that involved tracing all interactions (requests) between the Netflix app, our Content Delivery Network (CDN), and backend microservices. The process started with manual pull of member account information that was part of the session.

article thumbnail

Kubernetes And Kernel Panics

The Netflix TechBlog

But, with that prework, when the time comes, the kernel can easily construct the packet and get it out the (preconfigured) network interface as things come crashing down. 10/16/2017 [ 8374.555629] Call Trace: [ 8374.556147] <TASK> [ 8374.556601] dump_stack_lvl+0x45/0x5b [ 8374.557361] panic+0x103/0x2db [ 8374.558166] ?

Hardware 239
article thumbnail

USENIX LISA2021 Computing Performance: On the Horizon

Brendan Gregg

AWS Graviton2); for memory with the arrival of DDR5 and High Bandwidth Memory (HBM) on-processor; for storage including new uses for 3D Xpoint as a 3D NAND accelerator; for networking with the rise of QUIC and eXpress Data Path (XDP); and so on.

article thumbnail

AWS re:Invent 2017: How Netflix Tunes EC2

Brendan Gregg

My last talk for 2017 was at AWS re:Invent, on "How Netflix Tunes EC2 Instances for Performance," an updated version of my [2014] talk. WARNING: These tunables were developed in late 2017, for Ubuntu Xenial instances on EC2.** Networking. We help where we can. My talk included a section on Linux kernel tunables, as follows.

Tuning 53