A robust and lightweight networking architecture for partitioned systems capable of generating a virtual network between partitions is established by utilizing Virtual Network Interfaces (vNICs) mapped over shared memory in conjunction with the lwIP (Lightweight IP) TCP/IP stack.
Abstract
In the field of critical embedded systems, the use of hypervisors such as XtratuM Next Generation (XNG) allows for the concurrent execution of multiple environments, known as partitions, guaranteeing strict spatial and temporal segregation. These partitions require standard communication channels to interact with each other and with external networks securely, without compromising system safety.
This paper presents a robust and lightweight networking architecture for partitioned systems.
By utilizing Virtual Network Interfaces (vNICs) mapped over shared memory in conjunction with the lwIP (Lightweight IP) TCP/IP stack, an architecture capable of generating a virtual network between partitions is established. Additionally, the adoption of standard protocols like TCP/IP aligns the system with industry standards, eliminating the need to rewrite communication mechanisms when interfacing with complex operating systems such as Linux.
Finally, the architecture demonstrates its capability to establish seamless communication between bare-metal applications and guest operating system environments within the same embedded system.
Advances in 5G connectivity, edge computing, and cloud-native platforms have driven network environments to new levels of scale and dynamism, challenging conventional security mechanisms for secure communication. For this reason, we introduce the Trusted Network Environment for Devices (TNED). The TNED is an architectu...
F. Ciravegna, Giacomo Bruno, Mattin Antartiko Elorza Forcada et al.· IEEE Access· 0 citations
Cloud-native microservices architectures rely on network namespaces for isolation, with the overhead of container communications remaining a critical performance bottleneck. While colocating containers on the same host mitigates some of this overhead, it cannot match the performance of communication within a single net...
Daniel Borkmann, Paul Chaignon· Proceedings of the 4th Works...· 0 citations
XTLS (eXtract TLS), a TLS offloading architecture that liberates the host CPU from this "TLS tax", is presented, a dual-stack design that offloads the entire TLS stack to the NIC—leaving the host to focus on application logic—and an adaptive per-flow symmetric-crypto NIC offload policy that jointly optimizes Requests P...
Seongjong Bae, Junghan Yoon, Kyoungsoo Park· Proceedings of the 17th ACM...· 0 citations
The architecture introduces two reusable system-level design principles: interrupt-independent notification via sequence counters, avoiding OS-mediated jitter as much as possible, and cache-aware core selection based on the non-uniform cache architecture (NUCA) to reduce the variability of access latency, thereby achie...
Hui-Ji Zheng, Qing Liu, Kang Wang et al.· Electronics· 0 citations
Modern mission-critical coordination demands seamless communication across multiple domains. Traditionally, Voice Communication Systems (VCS) have relied on physically separated Red/Black architectures to ensure voice and data segregation. While these hardware-based methods provide strong security assurances and remain...
Quang Cao, Peter Vinci, Nick Georghiou et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.