Policing Offloaded

Policing of incoming packets can produce very high load in worst-case situations on a receiving computer. In realtime systems, resources must be allocated for such worstcase situations if guarantees are given to processes. This paper1 describes design and implementation of a policing function on an off-the-shelf network adapter board containing a relatively slow microprocessor. Performance measurements indicate that the host computer can be effectively shielded from misbehaving inbound connections. The load on the host CPU is confined to be proportional to the number of packets on admitted and conforming connections, even in the presence of very large numbers of incoming packets on not-admitted connections. As a side effect, zerocopy implementation of protocols is supported.

• Type: Conference
• Year: 2000
• Where: RTAS
• Authors: Uwe Dannowski, Hermann Härtig
• Keywords: Embedded Systems, Off-the-shelf Network Adapter, Paper1 Describes Design, RTAS 2000, Worst-case Situations