Skip to content
Open access

Virtual networking and routing in partitioned embedded systems

Sep 2026 · Jornadas de Automática · 0 citations

TL;DR

A robust and lightweight networking architecture for partitioned systems capable of generating a virtual network between partitions is established by utilizing Virtual Network Interfaces (vNICs) mapped over shared memory in conjunction with the lwIP (Lightweight IP) TCP/IP stack.

Abstract

In the field of critical embedded systems, the use of hypervisors such as XtratuM Next Generation (XNG) allows for the concurrent execution of multiple environments, known as partitions, guaranteeing strict spatial and temporal segregation. These partitions require standard communication channels to interact with each other and with external networks securely, without compromising system safety. This paper presents a robust and lightweight networking architecture for partitioned systems. By utilizing Virtual Network Interfaces (vNICs) mapped over shared memory in conjunction with the lwIP (Lightweight IP) TCP/IP stack, an architecture capable of generating a virtual network between partitions is established. Additionally, the adoption of standard protocols like TCP/IP aligns the system with industry standards, eliminating the need to rewrite communication mechanisms when interfacing with complex operating systems such as Linux. Finally, the architecture demonstrates its capability to establish seamless communication between bare-metal applications and guest operating system environments within the same embedded system.

Read PDF

Similar papers

Open access 2026

TNED: Trusted Network Environment for Devices

Advances in 5G connectivity, edge computing, and cloud-native platforms have driven network environments to new levels of scale and dynamism, challenging conventional security mechanisms for secure communication. For this reason, we introduce the Trusted Network Environment for Devices (TNED). The TNED is an architectu...

F. Ciravegna, Giacomo Bruno, Mattin Antartiko Elorza Forcada et al. · 0 citations
Book Open access Sep 2026

Netkit: Specializing Linux Packet Delivery for Container Networks

Cloud-native microservices architectures rely on network namespaces for isolation, with the overhead of container communications remaining a critical performance bottleneck. While colocating containers on the same host mitigates some of this overhead, it cannot match the performance of communication within a single net...

Daniel Borkmann, Paul Chaignon · 0 citations
Book Open access Sep 2026

XTLS: Scalable TLS Offloading through Host-SmartNIC Stack Co-Design

XTLS (eXtract TLS), a TLS offloading architecture that liberates the host CPU from this "TLS tax", is presented, a dual-stack design that offloads the entire TLS stack to the NIC—leaving the host to focus on application logic—and an adaptive per-flow symmetric-crypto NIC offload policy that jointly optimizes Requests P...

Seongjong Bae, Junghan Yoon, Kyoungsoo Park · 0 citations
Open access Sep 2026

A Deterministic FPGA-CPU Data Interaction Architecture with Cache-Aware Core Selection for Real-Time Systems

The architecture introduces two reusable system-level design principles: interrupt-independent notification via sequence counters, avoiding OS-mediated jitter as much as possible, and cache-aware core selection based on the non-uniform cache architecture (NUCA) to reduce the variability of access latency, thereby achie...

Hui-Ji Zheng, Qing Liu, Kang Wang et al. · 0 citations
Preprint Sep 2026

SoK: Secure Software-Based Multi-Domain Data Segregation

Modern mission-critical coordination demands seamless communication across multiple domains. Traditionally, Voice Communication Systems (VCS) have relied on physically separated Red/Black architectures to ensure voice and data segregation. While these hardware-based methods provide strong security assurances and remain...

Quang Cao, Peter Vinci, Nick Georghiou et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.