12 messages in com.xensource.lists.xen-develRe: [Xen-devel] RFC: virtual network ...
FromSent OnAttachments
Reiner Sailer27 Jul 2006 13:51 
Caitlin Bestler27 Jul 2006 13:57 
Keir Fraser28 Jul 2006 02:18 
Reiner Sailer28 Jul 2006 07:17 
Keir Fraser28 Jul 2006 07:30 
Harry Butterworth28 Jul 2006 07:47 
Reiner Sailer28 Jul 2006 07:55 
Keir Fraser28 Jul 2006 08:05 
Gerd Hoffmann28 Jul 2006 08:12 
Reiner Sailer28 Jul 2006 09:30 
Reiner Sailer28 Jul 2006 12:49 
Mike Day28 Jul 2006 16:42 
Subject:Re: [Xen-devel] RFC: virtual network access control
From:Reiner Sailer (sai@us.ibm.com)
Date:07/28/2006 09:30:27 AM
List:com.xensource.lists.xen-devel

Keir Fraser <Keir@cl.cam.ac.uk> wrote on 07/28/2006 11:06:22 AM:

On 28 Jul 2006, at 15:56, Reiner Sailer wrote:

You mean tag a packet when it arrives from a source domain and then use that if/when it boomerangs back at you on a different virtual interface?

It is a one-liner to set the input device in the skb.

In terms of cost, an extra hypercall per packet will have measurable cost, at least in CPU usage, for high-bandwidth network transfers.

-- Keir

You only make the decision once for the first packet exchanged between two interfaces. Afterwards you reuse this decision for this interface pair (local cache). You basically have the cost of looking up a decision locally.

Reiner