Dapper: Data plane performance diagnosis of TCP

Mojgan Ghasemi, Theophilus Benson, Jennifer L. Rexford

Research output: Chapter in Book/Report/Conference proceedingConference contribution

74 Scopus citations


With more applications moving to the cloud, cloud providers need to diagnose performance problems in a timely manner. Offline processing of logs is slow and inefficient, and instrumenting the end-host network stack would violate the tenants' rights to manage their own virtual machines (VMs). Instead, our system Dapper analyzes TCP performance in real time near the end-hosts (e.g., at the hypervisor, NIC, or top-of-rack switch). Dapper determines whether a connection is limited by the sender (e.g., a slow server competing for shared resources), the network (e.g., congestion), or the receiver (e.g., small receive buffer). Emerging edge devices now offer flexible packet processing at high speed on commodity hardware, making it possible to monitor TCP performance in the data plane, at line rate. We use P4 to prototype Dapper and evaluate our design on real and synthetic traffic. To reduce the data-plane state requirements, we perform lightweight detection for all connections, followed by heavier-weight diagnosis just for the troubled connections.

Original languageEnglish (US)
Title of host publicationSOSR 2017 - Proceedings of the 2017 Symposium on SDN Research
PublisherAssociation for Computing Machinery, Inc
Number of pages14
ISBN (Electronic)9781450349475
StatePublished - Apr 3 2017
Event2017 Symposium on SDN Research, SOSR 2017 - Santa Clara, United States
Duration: Apr 3 2017Apr 4 2017

Publication series

NameSOSR 2017 - Proceedings of the 2017 Symposium on SDN Research


Other2017 Symposium on SDN Research, SOSR 2017
Country/TerritoryUnited States
CitySanta Clara

All Science Journal Classification (ASJC) codes

  • Computer Networks and Communications
  • Software


  • Measurement
  • Network monitoring
  • Performance diagnosis


Dive into the research topics of 'Dapper: Data plane performance diagnosis of TCP'. Together they form a unique fingerprint.

Cite this