[Xen-devel] Re: [PATCH] Credit Limiting Backend Network Interfaces

[Nuutti Kotivuori <naked@xxxxxx>]

Ross C. Mcilroy wrote:
> Attached is a patch which allows a domain's network transmission to
> be limited, to a certain credit of bytes every predefined period.

I believe this is as it should be, but just checking...

This patch limits the amount of bytes accepted by the vif interface at
Xen level (or at domain0) and not on the guest side, right? That is, a
malicious guest kernel cannot send faster than the limit?

The linux implementation of the guest side of this starts and stops
the queue on the device as appropriate - so that the normal linux
traffic queueing stuff can handle the entire queue as they see fit,
just like on a real hardware device that is slower, right?

-- Naked



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel