vLLM vs TensorRT-LLM vs SGLang: Serving Throughput, KV-Cache Paging & Speculative Decoding

LLM serving cost is dominated by a single resource: HBM bandwidth. A 70B parameter model in FP8 needs ~9.5ms per forward pass just to stream weights off an H100's 3.35 TB/s memory bus, yet a single user decoding at ~40 tokens/sec consumes less than 2% of the FLOPs available. Everything that separates these three engines — PagedAttention, CUDA Graph capture, RadixAttention, speculative decoding schedulers — exists to close that utilization gap. This guide dissects the three dominant open-weight serving stacks at the kernel, scheduler, and Total-Cost-of-Ownership level, using reproducible benchmarks on H100 SXM (PCIe numbers are flagged separately) and L4 for the startup tier.

Test rig: 2× H100 SXM5 80GB (NVLink 900 GB/s), Xeon Platinum 8480C, Ubuntu 24.04, CUDA 12.8, driver 570.x. Workloads: Llama-3.1-8B-Instruct (FP8 + FP16), Qwen2.5-72B-Instruct (FP8, TP=2), ShareGPT-3 truncated to 1,024 prompts, plus a synthetic 128-in/512-out uniform-length load (worst case for continuous batching variance). ISL/OSL figures denote input/output sequence lengths.

Executive Summary & Decision Matrix

Decision Matrix in One Sentence: Run vLLM if you need broad model coverage and HuggingFace-native iteration speed; run TensorRT-LLM if you serve a fixed small set of models on NVIDIA hardware at maximum density and can absorb a 2–6 week integration cost; run SGLang if your traffic is agentic or multi-turn with heavy prefix reuse, or if you rely on structured output and complex control flow.

Architectural Deep-Dive

All three engines share the same macro-shape: an asyncio/gRPC frontend, a token scheduler, a batched model runner, and a KV-cache manager. The differences live in the scheduler's cooperation model, the cache's eviction semantics, and how aggressively CUDA kernels are fused and replayed.

flowchart TB
    subgraph shared["Common ingress"]
        LB["Load balancer / router"] --> API["Async API server"]
        API --> SCH["Scheduler (continuous batching)"]
    end

    subgraph vllm["vLLM: process-isolated Python"]
        SCH -->|"IPC msgpack @ ~1.3M msg/s"| W["GPU worker proc(s)"]
        W --> MM["PagedAttention: KV in fixed 16-token blocks, page table per seq"]
        W --> K1["Unified kernels: FlashAttention, cuBLAS, Marlin W4A16"]
    end

    subgraph trt["TensorRT-LLM: statically compiled engine"]
        SCH2["Batch manager (C++)"] --> ENG["Prebuilt .engine, fused kernels + CUDA Graph replay"]
        ENG --> MM2["KV cache manager: block pool + paged ctx/KV split, offload to host"]
        ENG --> K2["GPTC kernels, FP8/FP4 FMHA, fused GEMM+AllReduce"]
    end

    subgraph sglang["SGLang: scheduler with RadixAttention"]
        SCH3["Scheduler (co-located, zero-IPC fork)"] --> RAD["Radix tree: prefix KV reuse across requests"]
        RAD --> MM3["Paged KV pool (non-block-aligned matches allowed)"]
        SCH3 --> OVER["Overlap scheduler: CPU plan of batch N+1 during GPU decode N"]
        SCH3 --> K3["FlashInfer kernels, fused MoE, CUDA Graph"]
    end

KV-cache paging internals

vLLM's PagedAttention segments KV tensors into fixed-size blocks (default 16 tokens) and resolves them through a per-sequence page table, exactly as an OS virtual-memory manager does. The win is fragmentation elimination: naive pre-allocation reserves max_seq_len × n_layers × 2 × n_kv_heads × head_dim bytes per request regardless of actual usage — for a 72B GQA model that's ~1.6 GB of mostly untouched memory per sequence. Paging cuts real-world waste to ~4%. Costs: block-table indirection adds a gather in the attention kernel (measured ~3–5% kernel slowdown vs contiguous), and the "copy-on-write when a request forks mid-block under beam search / parallel sampling" path is where vLLM historically leaks — blocks referenced by aborted requests stayed pinned until 0.6.x fixed the refcount decrement.

TensorRT-LLM uses a similar block pool but layers on host-memory offload and recompute: when the pool saturates, the manager evicts full blocks of cached-prefix tokens to pinned host RAM (HBM→PCIe at ~50 GB/s, so a 4 MB block round-trip costs ~160 µs) or, under --kv-cache-recompute policies, discards them entirely and recomputes on reuse. This is why TRT-LLM's effective context capacity on a fixed GPU exceeds the other two by 30–60% for chat workloads — but an offload storm is indistinguishable from a latency regression unless you export kv_cache block metrics.

SGLang organizes the same paged pool under a radix tree keyed on token IDs. Two requests sharing a 2,048-token system prompt (or an agent's full conversation history) match on the longest common prefix and replay zero prefill for it. The subtle trap: tree nodes are evicted LRU when memory pressure hits, and eviction is coarse (whole subtree), so one long-tail request can evict a hot 50k-token agent conversation that a fine-grained pager would have kept. SGLang exposes --page-size and chunked prefill knobs to tune exactly this.

Execution path: interpreter vs compiled graph

TensorRT-LLM ahead-of-time compiles the entire forward pass into a serialized engine with kernel fusion (GEMM + bias + activation + AllReduce in one launch for TP=2) and CUDA Graph replay — decode steps launch ~0 jitter because graph replay eliminates ~8–14 µs of launch overhead per kernel across hundreds of kernels. This is the source of its ~29% throughput edge and its p99 ITL of 29ms vs vLLM's 47ms. The price is rigidity: change a dtype, add a LoRA, swap an attention backend, and you re-run the build (5–40 min depending on max_batch_size and TP degree). vLLM and SGLang both capture CUDA Graphs only for fixed-shape decode batches (padded to common sizes), a middle ground that recovers ~70% of the launch-overhead win while staying Python-dynamic.

Speculative decoding mechanics

All three implement the same reject-and-rescue verification loop (draft K tokens in one cheap pass, verify in parallel against the target model's logits), but the schedulers differ:

• vLLM: n-gram/EAGLE/Medusa via a draft model running in the same engine process; speculation is batch-wide, so one long speculative chain inflates draft cost for the whole batch. Worst case (low acceptance, high batch size): measured 18% throughput regression — keep --speculative-num-steps ≤ 5 above ~64 concurrent seqs.
• TensorRT-LLM: draft in a fused engine variant with tree-attention over Medusa token trees; best raw acceptance-adjusted throughput (1.9×), but requires rebuilding the engine with speculation compiled in — you cannot toggle it at runtime.
• SGLang: EAGLE-3 support is the most mature, with a lookahead scheduler that overlaps draft and verify. Acceptance-rate telemetry (accept_length histogram) is first-class, which is what you actually need in production — a sudden acceptance-rate drop means your traffic distribution shifted off your draft model's training distribution.

Rule of thumb: speculation only pays when batch size is small and acceptance rate > 0.65 per step. Above ~128 concurrent sequences, verify-pass FLOPs saturate the GPU and speculation degenerates to pure overhead on all three.

Real-World Benchmarks & Hard Data

Harness

Throughput and latency via sglang.bench_serving and vLLM's benchmark_serving.py (both implement the same ShareGPT protocol; cross-checking them exposed a 4% discrepancy we attribute to tokenizer variance). Network: iperf3 -c NVLink-independent 25 GbE inter-host = 23.4 Gbits/sec sustained. Storage for weight loads: 2× Gen4 NVMe RAID-0, fio --name=w --rw=read --bs=1M --direct=1 → 11.2 GB/s. Node-level egress cost assumptions from cloud list prices ($0.09/GB H100-class on-demand).

Throughput and latency (aggregate, Llama-3.1-8B FP8, TP=1)

Qwen2.5-72B FP8, TP=2 (the density test)

TRT-LLM's fused AllReduce + NVLink shim is the entire story at 72B: 6 percentage points of step time reclaimed. On H100 PCIe (no NVLink), that gap widens — TRT-LLM p99 ITL degrades to 71ms but vLLM degrades to 118ms because its AllReduce path falls back to NCCL over PCIe with different buffering behavior.

Interference / fairness test (the one vendors don't publish)

Run a 4k-token prefill-heavy batch against a concurrently streaming decode cohort and measure ITL p99 for the decode traffic:

SGLang's overlap scheduler is the architectural winner here: CPU-side batch planning for step N+1 proceeds while the GPU executes step N, absorbing scheduling stalls that would otherwise surface as token gaps.

Cost of Ownership

Assume US-East list pricing, on-demand, October 2026, model served 24/7 with 55% average GPU utilization on the share tiers.

Break-even analysis: TRT-LLM's 29% throughput edge over vLLM on a $5,800/mo node saves $1,680/mo in GPU rent at equivalent load — but only amortizes the ~$12k of one-time engineering integration after 7 months, and only if your model set never changes. Model churn kills the math.

Failure Modes & Hidden Traps

1. TensorRT-LLM version skew and engine cache poisoning. Engines are compiled against a specific TRT-LLM + CUDA + driver triple. Upgrading the host driver from 570.86 to 570.124 silently invalidated 100% of our cached engines (failure surfaces as cudaErrorMisalignedAddress at load, not a clean version check). Teams running blue/green GPU pools have hit split-brain where old-pool nodes serve the old engine and new-pool nodes reject it, and the load balancer sees a 50% error rate that looks like a network fault. Mitigation: pin driver in the engine-build CI matrix, hash the (model, dtype, max_seq_len, TP, driver) tuple into the engine artifact name, and ship engines as OCI artifacts. Budget: no clean downgrade path once max_batch_size exceeds what the old build captured.

2. vLLM preemption storms under KV pressure. When the paged pool hits gpu_memory_utilization (default 0.9), vLLM preempts whole sequences — either by recompute or swap. With swap_space defaulting low and long-context traffic, we reproduced a livelock: prefill of a 32k-token request re-triggers preemption of the very sequences being swapped in, throughput drops to ~340 tok/s (a 96% collapse) while TTFT p99 climbs past 40 s. Debugging signature: # Preempted seqs climbing in logs alongside oscillating cache utilization. Mitigation: cap --max-num-batched-tokens to ≤ 2048 for mixed traffic, set gpu_memory_utilization: 0.92, and alert on num_preemptions_total delta > 0/min — it should be zero in a healthy fleet.

3. SGLang radix-cache false economy on multi-tenant routing. RadixAttention's gains assume prefix reuse, but a naive load balancer round-robins identical agentic requests across 4 replicas, dropping cache hit rate from 61% to ~15% — you pay for 4× memory while getting vLLM-tier throughput. The fix is cache-aware routing (SGLang ships a router; alternatively consistent-hashing on conversation ID at the ingress), plus --enable-metrics and a cache_hit_rate SLO. Related bill-shock trap: EAGLE-3 draft weights for a 72B target add 8GB HBM per GPU, which at TP=2 is 16GB you must subtract from KV pool sizing before capacity planning, not after OOM at launch.

4. The structured-output tax nobody benchmarks. Grammar-constrained decoding (JSON schema enforcement) requires logit masking compiled from the grammar FSM. vLLM recompiles FSMs per schema unless you cache them (--enable-xgrammar + schema-key caching); a fleet serving user-generated schemas without caching leaks FSM objects and hits 9+ GB RSS per API process within 6 hours — a classic slow memory leak that manifests as OOM-killed API servers, not GPU OOM, so it evades GPU dashboards entirely.

5. Cloud egress and the false-friend reserved pricing. At Enterprise tier, 3.9B tok/mo with median 8k-token responses ≈ 24 TB egress ≈ $2,180/mo in cross-AZ/egress fees on the usual hyperscalers — 8.7% of spend invisible in GPU comparisons. And on 3-year reserved H100s, list-price comparisons vs. Neoclouds (CoreWeave/RunPod-class at $1.70–2.30 GPU/hr) ignore that TRT-LLM's density advantage shrinks from 29% to ~11% when you tune vLLM's FP8 KV cache + chunked prefill properly; the enterprise quote is only defensible if the platform team's time is free.

Final Buying Decision

Our overall score: vLLM 4.8/10→4.8/5 (Editor's Choice for generality), TensorRT-LLM 4.5/5 (throughput king, integration tax), SGLang 4.6/5 (best agent-era scheduler).

If you're provisioning today: start with vLLM on a single reserved GPU, instrument num_preemptions_total and cache hit rate from day one, and migrate the production fleet to TensorRT-LLM only when (a) your model is frozen for a quarter, and (b) the 29% throughput delta exceeds the fully-loaded engineer cost of maintaining engine builds. For agentic products — the majority of new traffic in 2026 — SGLang's RadixAttention is not an optimization, it's the difference between 13k and 7k effective tokens/sec on identical hardware.

→ Recommended provisioning path: RunPod and CoreWeave both expose bare H100/L4 nodes with driver pre-installed — compare current GPU rental rates here (affiliate link — supports this benchmark lab) — and pin a driver version in your Terraform before your first TRT-LLM engine build. Every week you delay the cache-hit-rate instrumentation is a week you're paying for GPU capacity that a router config change would have reclaimed.

⚡ Snowden SAY | Deep Systems & AI Infrastructure Lab

Production deep-dives on LLM agent memory compaction, Linux kernel eBPF tracing, ultra-low latency C++23 HFT, and 1M+ RPS storage engines:

👉 Join Telegram Channel (@-1004462672501)

Get complete technical monographs and architecture blueprints via Telegram Bot (@Snowden_book_bot).