Subject: Re: transparent filtering and bridge(4)?
To: Steven M. Bellovin <smb@research.att.com>
From: Jason R Thorpe <thorpej@wasabisystems.com>
List: current-users
Date: 03/06/2002 20:09:59
On Wed, Mar 06, 2002 at 11:05:54PM -0500, Steven M. Bellovin wrote:
> Now that's an interesting architectural challenge. I suspect that you
> can't easily do that translation from the kernel (an upcall to gcc?),
> but the ability to download arbitrary machine code isn't that different
> than LKMs are now. I wonder if there's a way to safely and efficiently
> have kernel processes that share a bit of address space, but not all.
The BPF-to-C thing was just an experiment. My intent was to actually
map BPF insns to native insns/millicode directly, skipping the C step.
--
-- Jason R. Thorpe <thorpej@wasabisystems.com>