Patent ID: 11893409
Assignee: NICIRA, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 12:
13. A non-transitory machine readable medium storing a security program executable by at least one processing unit of a host computer, the security program for securing a managed forwarding element (MFE) that executes on a virtual machine (VM) executing on the host computer, the security program comprising sets of instructions for:
receiving a notification that the MFE is loaded on the particular VM, the MFE for performing forwarding operations to forward packets between the particular VM and a plurality of other VMs; and
securing the MFE by isolating, in a physical memory of the host computer, executable code and data of the MFE from executable code and data of other applications that execute on the particular VM,
wherein the set of instructions for said isolating comprises sets of instructions for (i) receiving a plurality of memory mapping tables that maps a physical memory of the particular VM to a physical memory of the host computer and (ii) dividing the plurality of memory mapping tables into first and second sets of memory mapping tables, wherein the first set of memory mapping tables maps physical memory of the particular VM that contains the MFE to a first region of the physical memory of the host computer, and the second set of memory mapping tables maps physical memory of the VM that contains the other applications to a second region of the physical memory of the host computer.