Policing Offloaded

9 years 5 months ago
Policing Offloaded
Policing of incoming packets can produce very high load in worst-case situations on a receiving computer. In realtime systems, resources must be allocated for such worstcase situations if guarantees are given to processes. This paper1 describes design and implementation of a policing function on an off-the-shelf network adapter board containing a relatively slow microprocessor. Performance measurements indicate that the host computer can be effectively shielded from misbehaving inbound connections. The load on the host CPU is confined to be proportional to the number of packets on admitted and conforming connections, even in the presence of very large numbers of incoming packets on not-admitted connections. As a side effect, zerocopy implementation of protocols is supported.
Uwe Dannowski, Hermann Härtig
Added 25 Aug 2010
Updated 25 Aug 2010
Type Conference
Year 2000
Where RTAS
Authors Uwe Dannowski, Hermann Härtig
Comments (0)