{"id":"https://openalex.org/W7165798044","doi":"https://doi.org/10.48550/arxiv.2606.23969","title":"The Serialized Bridge: Understanding and Recovering LLM Serving Performance under Blackwell GPU Confidential Computing","display_name":"The Serialized Bridge: Understanding and Recovering LLM Serving Performance under Blackwell GPU Confidential Computing","publication_year":2026,"publication_date":"2026-06-22","ids":{"openalex":"https://openalex.org/W7165798044","doi":"https://doi.org/10.48550/arxiv.2606.23969"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.23969","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23969","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.23969","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139279257","display_name":"Hang Yin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yin, Hang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139247723","display_name":"Kevin Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Kevin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.3125,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.3125,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.18770000338554382,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.12229999899864197,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.8101000189781189},{"id":"https://openalex.org/keywords/concurrency","display_name":"Concurrency","score":0.6887000203132629},{"id":"https://openalex.org/keywords/scheduling","display_name":"Scheduling (production processes)","score":0.6177999973297119},{"id":"https://openalex.org/keywords/asynchronous-communication","display_name":"Asynchronous communication","score":0.541100025177002},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.40880000591278076},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.38199999928474426}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8133000135421753},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.8101000189781189},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.6887000203132629},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.6177999973297119},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.541100025177002},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4503999948501587},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.40880000591278076},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.38199999928474426},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.35899999737739563},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.353300005197525},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.335099995136261},{"id":"https://openalex.org/C2984822820","wikidata":"https://www.wikidata.org/wiki/Q1123036","display_name":"Processor scheduling","level":3,"score":0.2903999984264374},{"id":"https://openalex.org/C150495011","wikidata":"https://www.wikidata.org/wiki/Q128392","display_name":"Concurrent computing","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2833000123500824},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.23969","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23969","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.23969","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.23969","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4361282289028168,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"GPU":[0,65],"Confidential":[1],"Computing":[2],"(GPU-CC)":[3],"now":[4],"preserves":[5],"GPU-local":[6],"performance:":[7],"on":[8,45,185],"NVIDIA":[9],"B300,":[10,186],"BF16":[11],"matmul":[12],"runs":[13],"at":[14,92],"0.998x":[15],"of":[16,30,107,143],"non-confidential":[17],"performance.":[18],"Yet":[19],"LLM":[20],"serving":[21],"under":[22],"Intel":[23],"TDX":[24],"plus":[25],"GPU-CC":[26,70],"still":[27],"loses":[28],"13-27%":[29],"throughput,":[31],"and":[32,52,55,96,119,167,195,199],"KV-cache":[33],"restore":[34],"latency":[35],"can":[36],"more":[37],"than":[38],"double.":[39],"This":[40,103],"paper":[41],"studies":[42],"that":[43,69],"gap":[44,126,204],"two":[46],"Blackwell":[47,172],"platforms,":[48],"RTX":[49],"Pro":[50],"6000":[51],"B300":[53],"HGX,":[54],"identifies":[56],"its":[57],"dominant":[58],"cause:":[59],"the":[60,93,105,125,144,175,201],"confidential":[61,176,181,207],"VM-GPU":[62],"bridge,":[63],"not":[64,82],"compute.":[66],"We":[67,179],"find":[68],"turns":[71],"host/device":[72],"movement":[73],"into":[74],"a":[75,87,100,147,163,168,193],"serialized,":[76],"high-setup-cost":[77],"channel.":[78],"Secure":[79],"copies":[80],"do":[81],"gain":[83],"CUDA-stream":[84],"concurrency":[85],"within":[86],"context,":[88],"asynchronous":[89],"transfers":[90],"block":[91],"runtime":[94],"boundary,":[95],"small":[97,130],"crossings":[98],"pay":[99],"fixed":[101],"toll.":[102],"violates":[104],"assumptions":[106],"modern":[108],"inference":[109],"runtimes,":[110],"where":[111],"DMA":[112],"is":[113],"expected":[114],"to":[115,152],"be":[116],"cheap,":[117],"concurrent,":[118],"asynchronous.":[120],"In":[121],"vLLM":[122],"dense":[123],"decode,":[124],"closes":[127],"around":[128],"44x-slower":[129],"alloc-and-copy":[131],"operations;":[132],"targeted":[133],"patches":[134],"reject":[135],"alternative":[136],"explanations.":[137],"A":[138],"scheduling":[139],"flag":[140],"recovers":[141,150],"57%":[142],"gap,":[145],"while":[146],"worker-thread":[148],"drain":[149],"up":[151],"92%":[153],"in":[154],"qualified":[155],"high-concurrency":[156],"runs.":[157],"The":[158],"same":[159],"bridge":[160],"model":[161],"explains":[162],"+131%":[164],"KV-restore":[165],"penalty":[166],"34x":[169],"model-load":[170],"slowdown.":[171],"also":[173],"changes":[174],"tenancy":[177],"unit.":[178],"qualify":[180],"multi-GPU":[182],"NVSwitch":[183],"tenants":[184],"including":[187],"510":[188],"GB/s":[189],"NVLink":[190],"P2P":[191],"inside":[192],"CVM":[194],"concurrent":[196],"isolated":[197],"tenants,":[198],"identify":[200],"remaining":[202],"fabric-attestation":[203],"for":[205],"production":[206],"AI":[208],"platforms.":[209]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-25T00:00:00"}