Red Hat, Inc.

Jesper Dangaard Brouer

Michael Tsirkin

An example method may include: receiving, by a hypervisor, a data packet, identifying a memory location associated with a guest virtual machine and accessible to the guest virtual machine and the hypervisor, wherein a program mapping table comprising one or more mapping table entries is stored at the memory location, each mapping table entry specifying a program selection criterion and a packet processing program. The example method may further include identifying, among the one or more mapping table entries in the program mapping table stored at the memory location, a mapping table entry comprising a particular program selection criterion that is satisfied by the data packet, wherein the identified mapping table entry specifies a first packet processing program, and executing the first packet processing program, wherein the data packet is provided to the first packet processing program as input.

Secure control of packet filter programs by user space processes in virtual machines

Embodiments of the present disclosure relate to determining modification bounds that identify portions of a packet that are safe to modify so that modified portions of the packet may be flushed from a cache to a memory of a network interface card (NIC) of a host system when the entire packet is synchronized from the NIC. A modification bound of the filter may be determined, and a network packet may be received from the NIC. In response to determining that the network packet is to be modified, a portion of the network packet that is safe to modify may be identified based on the modification bound of the filter and modifications may be made thereto. The modified portion of the network packet may be synchronized to the NIC.

Efficient packet re-transmission for express data paths

A method may include receiving, by a privileged component executed by a processing device, bytecode of a packet processing component from an unprivileged component executed by the processing device, analyzing, by the privileged component, the bytecode of the packet processing component to identify whether the bytecode comprises a first command that returns a redirect, analyzing, by the privileged component, the bytecode of the packet processing component to identify whether the bytecode comprises a second command that returns a runtime computed value, and responsive to determining that the bytecode comprises the first command or the second command, setting a redirect flag maintained by the privileged component.

Hardware offload support for an operating system offload interface using operation code verification

A network packet is received from a network interface card (NIC). A determination is made, in view of a filter specifying handling of network packets, as to whether the network packet is to be modified. In response to determining that the network packet is to be modified, a portion of the network packet is modified in view of the filter. The modified portion of the network packet is provided to the NIC.

A first filter specifying handling of one or more network packets received via a network is identified. A first set of access bounds to be used by a network interface card (NIC) to synchronize the one or more network packets received via the network is determined in view of the first filter. The first set of access bounds are provided to a driver of the NIC.

Efficient packet processing for express data paths

A method for memory de-allocation may include identifying, by a processing device, a first memory object to be de-allocated within a scope of a function, creating a private freelist associated with the function, the private freelist comprising a reference to the first memory object, performing, within the scope of the function, a plurality of iterations to de-allocate a plurality of memory objects, wherein each iteration comprises adding, to the private freelist, a reference to a memory object of the plurality of memory objects, and causing, by a processing device, a public freelist to reference the private freelist.

Growing community of inventors

Copenhagen, Denmark

Jesper Dangaard Brouer