Uploaded June 2026 | Updated September 2026, 3 weeks ago
Cost-effective and Reliable Global Internet Peering with Programmable Switches
Congcong Miao, Tencent and National University of Singapore; Zhiyi Yao, Jianchao Lv, and Jinglin Wang, Tencent; Shihan Lin, University of Michigan; Xinyi Zhang, CNIC CAS, China; Yunming Xiao, The Chinese University of Hong Kong, Shenzhen; Wei Guo, Jiwu Bu, Yachen Wang, and Xianneng Zou, Tencent; Yong Jiang, Tsinghua Shenzhen International Graduate School; Marco Canini, KAUST; Gaogang Xie, CNIC CAS, China
Large-scale cloud providers always deploy peering routing system at the Internet’s peering edge to route traffic between the cloud and the Internet. Traditional router-based peering systems fail to pace up to the fast-changing application requirements, while the recent host-based approach is not cost-effective and struggles to address malicious traffic from the Internet. In this paper, we advocate for a radical new peering architecture to introduce programmable switches at the peering edge. We propose and implement a first-of-its-kind system, called Janus, to simultaneously handle inbound and outbound network traffic and significantly reduce network hardware cost. The core of Janus’s approach is to leverage a traffic dispatch module to offload most of the outbound traffic to switches to enhance system’s scalability. Janus offloads all inbound traffic to switches and redirects potential malicious traffic to the anti-DDoS service to enhance system reliability. Furthermore, Janus introduces a fast route convergence mechanism to effectively handle Internet-scale route updates. We have gradually deployed Janus at the edge of our production network over the past years. Evaluation results show that Janus can reduce the average hardware cost by 78%, as compared to existing systems while gracefully handling DDoS issues. Meanwhile, Janus can reduce the route convergence within seconds under failure scenarios, which is orders of magnitude faster than existing approaches.
View the full NSDI '26 program at usenix.org/conference/nsdi26/technical-sessions
Cost-effective and Reliable Global Internet Peering with Programmable Switches
Congcong Miao, Tencent and National University of Singapore; Zhiyi Yao, Jianchao Lv, and Jinglin Wang, Tencent; Shihan Lin, University of Michigan; Xinyi Zhang, CNIC CAS, China; Yunming Xiao, The Chinese University of Hong Kong, Shenzhen; Wei Guo, Jiwu Bu, Yachen Wang, and Xianneng Zou, Tencent; Yong Jiang, Tsinghua Shenzhen International Graduate School; Marco Canini, KAUST; Gaogang Xie, CNIC CAS, China
Large-scale cloud providers always deploy peering routing system at the Internet’s peering edge to route traffic between the cloud and the Internet. Traditional router-based peering systems fail to pace up to the fast-changing application requirements, while the recent host-based approach is not cost-effective and struggles to address malicious traffic from the Internet. In this paper, we advocate for a radical new peering architecture to introduce programmable switches at the peering edge. We propose and implement a first-of-its-kind system, called Janus, to simultaneously handle inbound and outbound network traffic and significantly reduce network hardware cost. The core of Janus’s approach is to leverage a traffic dispatch module to offload most of the outbound traffic to switches to enhance system’s scalability. Janus offloads all inbound traffic to switches and redirects potential malicious traffic to the anti-DDoS service to enhance system reliability. Furthermore, Janus introduces a fast route convergence mechanism to effectively handle Internet-scale route updates. We have gradually deployed Janus at the edge of our production network over the past years. Evaluation results show that Janus can reduce the average hardware cost by 78%, as compared to existing systems while gracefully handling DDoS issues. Meanwhile, Janus can reduce the route convergence within seconds under failure scenarios, which is orders of magnitude faster than existing approaches.
View the full NSDI '26 program at usenix.org/conference/nsdi26/technical-sessions
