[lkml]   [2009]   [Aug]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 2/2] vhost_net: a kernel-level virtio server
    On Thursday 13 August 2009, Michael S. Tsirkin wrote:
    > The best way to do this IMO would be to add zero copy support to raw
    > sockets, vhost will then get it basically for free.

    Yes, that would be nice. I wonder if that could lead to security
    problems on TX though. I guess It will only bring significant performance
    improvements if we leave the data writable in the user space or guest
    during the operation. If the user finds the right timing, it could
    modify the frame headers after they have been checked using netfilter,
    or while the frames are being consumed in the kernel (e.g. an NFS
    server running in a guest).

    Ardn <><

     \ /
      Last update: 2009-08-13 16:57    [W:0.018 / U:69.040 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site