Home | deutsch  | Legals | KIT

Policing Offloaded

Policing Offloaded

Uwe Dannowski and Hermann Härtig


Proceedings of the Sixth IEEE Real-Time Technology and Application Symposium (RTAS 2000), Washington D.C., May-June 2000

Date: 05.-06.2000


Policing of incoming packets can produce very high load in worst-case situations on a receiving computer. In realtime systems, resources must be allocated for such worstcase situations if guarantees are given to processes. This paper1 describes design and implementation of a policing function on an off-the-shelf network adapter board containing a relatively slow microprocessor. Performance measurements indicate that the host computer can be effectively shielded from misbehaving inbound connections. The load on the host CPU is confined to be proportional to the number of packets on admitted and conforming connections, even in the presence of very large numbers of incoming packets on not-admitted connections. As a side effect, zerocopy implementation of protocols is supported.


  author = {Uwe Dannowski and Hermann Haertig},
  title = {Policing Offloaded},
  booktitle = {Proceedings of the Sixth IEEE Real-Time Technology and Application Symposium},
  address = {Washington D.C.},
  month = may # "--" # jun,
  year = 2000,
  url = {http://l4ka.org/publications/}