LPC: Making the net go faster (Briefly: user-space network queues)
Posted Sep 15, 2011 17:14 UTC (Thu) by appie
In reply to: LPC: Making the net go faster (Briefly: user-space network queues)
Parent article: LPC: Making the net go faster
The idea behind network channels is to push (packet) processing out of the kernel towards the application. Over simplified: a direct pipe between incoming packets at the hardware level and the application. Packet processing won't be done by the kernel (again, oversimplified), hence no firewall checks.
Firewalls would have to be implemented in user space, in e.g. a library, every application connecting tot a network channel would need to link to that library and explicitly do it's own firewalling.
Also see: Van Jacobson's network channels
to post comments)