2018 · 297 citations · 27 references
ComputingComputer ScienceComputer SystemsApplication SecurityComputer NetworksOperating SystemsInterprocess CommunicationKernel DesignKernel ProgrammingApplication IsolationIsolationKernel Bypass NetworkingKernel-level IsolationNetworkingOperating System ArchitecturePacket ProcessingSecurity Mechanisms
Programmable packet processing is increasingly implemented using kernel bypass techniques, where a userspace application takes complete control of the networking hardware to avoid expensive context switches between kernel and userspace. However, as the operating system is bypassed, so are its application isolation and security mechanisms; and well-tested configuration, deployment and management tools cease to function.
27
Pat Bosshart, Dan Daly, Glen Gibb et al. · ACM SIGCOMM Computer Communication Review · 2014 · 2.8K citations
ClickOS and the Art of Network Function Virtualization
2014 · 677 citations
The design and implementation of open vSwitch
Ben Pfaff, Justin Pettit, Teemu Koponen et al. · Networked Systems Design and Implementation · 2015 · 673 citations
Sangjin Han, Keon Jang, KyoungSoo Park et al. · 2010 · 536 citations · Full text