Patent ID: 6219707
Filing Date: 2001-04-17
Classification: H04L

Abstract:
A method of achieving network separation within a computing system having a plurality of network interfaces, including a first and a second network interface, the method comprising:defining a plurality of burbs, wherein the plurality of burbs includes a first and a second burb and wherein the first burb includes a first protocol stack and the second burb includes a second protocol stack separate from the first protocol stack;assigning each of the plurality of network interfaces to one of the plurality of burbs, wherein assigning includes assigning the first network interface to the first burb and the second network interface to the second burb;binding processes to burbs; andrestricting communication between processes bound to different burbs, wherein restricting communication between processes includes the steps of:examining a message received by the first network interface; andif the message is to be routed through the second network interface, routing the message up through the first protocol stack to a process bound to the first burb, transferring the message to a process bound to the second burb and routing the message down through the second protocol stack to the second network interface.