Abstract
Often one needs to trade some performance for security, but not today. We'll be talking about kernel bypass based storage acceleration along with securing that storage via hardware within the server's own network interface card. We'll discuss using NVMe/TCP with kernel bypass, and how it can yield storage performance measured in 10s of microseconds as opposed to locally attached spinning disks at 10s of milliseconds. Also, we'll review how this storage can be secured by adding a mere 250 to 750 nanoseconds of latency required to adequately filter network accesses to this storage.