Subject: Re: transparent filtering and bridge(4)?
To: Steven M. Bellovin <smb@research.att.com>
From: Jason R Thorpe <thorpej@wasabisystems.com>
List: current-users
Date: 03/06/2002 20:09:59
On Wed, Mar 06, 2002 at 11:05:54PM -0500, Steven M. Bellovin wrote:

 > Now that's an interesting architectural challenge.  I suspect that you 
 > can't easily do that translation from the kernel (an upcall to gcc?), 
 > but the ability to download arbitrary machine code isn't that different 
 > than LKMs are now.  I wonder if there's a way to safely and efficiently
 > have kernel processes that share a bit of address space, but not all.

The BPF-to-C thing was just an experiment.  My intent was to actually
map BPF insns to native insns/millicode directly, skipping the C step.

-- 
        -- Jason R. Thorpe <thorpej@wasabisystems.com>