一句话：提出套接字粒度 I/O 虚拟化 SG-IOV，把容器网络卸载到 SmartNIC，实现可扩展的细粒度容器网络。
容器网络是现代云中 I/O 虚拟化的重要形式，但现有方案 CPU 开销高，且 SR-IOV 等 IOV 机制与容器需求不匹配：设备可扩展性受限、仅提供包层抽象、虚拟化粒度较粗。为此，论文提出套接字粒度的 I/O 虚拟化 SG-IOV，将容器网络高效卸载到 SmartNIC。SG-IOV 提供套接字级设备，在消息流抽象上支持大小变化的变换，并实现细粒度虚拟化。其核心原则是软件中介描述符等信号，加速器处理载荷，从而支持资源复用、自适应处理大小变化任务，并通过中间排队实施虚拟化。作者在 NVIDIA BlueField-3 上实现端到端容器网络原型。评估显示 SG-IOV 可扩展至 4K 以上设备（是 VF 的 10 倍），相比 Cilium 每 10Gbps 流量最多节省 1.9 个 CPU 核，带宽提升 53%，延迟最多降低 48%。
I/O Virtualization (IOV) is a cornerstone of cloud computing, with container networking as a critical form of IOV in modern cloud paradigms. While container networks serve as feature-rich infrastructure, they incur a high CPU tax yet leave room for efficiency improvement. A natural idea is to offload container networks onto hardware such as SmartNICs via IOV interfaces. However, existing IOV mechanisms, such as SR-IOV, are misaligned with container requirements: limited device scalability versus high container density, packet-layer abstraction versus application-layer processing demands, and coarse-grained virtualization versus fine-grained container workloads. In this work, we propose Socket-Granular I/O Virtualization (SG-IOV), a new IOV mechanism to offload container networks efficiently. SG-IOV provisions socket-level devices, supports size-varying transformations over a message-stream abstraction, and enables granular virtualization. Realizing this vision is non-trivial: Finer granularity stresses device scalability, while size-varying message processing complicates IO buffer management. Additionally, many fine-grained devices strain hardware virtualization enforcement. To overcome these challenges, the core principle of SG-IOV is that software mediates signals (e.g., descriptors) while accelerators touch the payload. This separation enables several innovations: resource multiplexing to support scalability, adaptive handling of size-varying tasks, and intermediate queuing to enforce virtualization. We prototype SG-IOV on the latest NVIDIA BlueField-3 and deliver an end-to-end container network solution. Our evaluations show that SG-IOV scales beyond 4K devices (10x more than VFs). Compared to Cilium, SG-IOV saves up to 1.9 cores per 10Gbps of traffic. Beyond core savings, SG-IOV achieves 53% higher bandwidth and reduces latency by up to 48%.
@inproceedings{ZhaoZML0Z0K26,
title = {SG-IOV: Socket-Granular I/O Virtualization for SmartNIC-Based Container Networks},
author = {Chenxingyu Zhao and Hongtao Zhang and Jaehong Min and Shengkai Lin and Wei Zhang and Kaiyuan Zhang and Ming Liu and Arvind Krishnamurthy},
booktitle = {ASPLOS},
year = {2026},
doi = {10.1145/3779212.3790218}
}