Function as a Service Offloaded to a SmartNIC

Data security has become a crucial factor in the context of computer networks. From 2015 until 2021, the damage caused by the theft of information on the Internet was around 6 trillion dollars. In this scenario, Intrusion Detection Systems (IDSs) are essential elements in the search for threats. However, usually, IDSs run on conventional computers with little processing power and high operating costs. Offloading of network functions in SmartNICs and the Serverless paradigm emerge as efficient solutions because they combine flexibility and programmability. This paper proposes an IDS Serverless with offloading of user-defined filters in SmartNIC Netronome. We created different filters using the eBPF technology to validate the system. Our results show that it is possible to detect vulnerabilities at line rate.