Canonical Network Isolator Component

An apparatus for isolating a computer platform, the apparatus comprising:

• a canonical network interface controller card including processing circuitry and a first buffer, the first buffer having a dual port connection to a corresponding second buffer of the computer platform, the first and second buffers forming the only access point from the network to the computer platform, the canonical network interface card being provided between a network and the computer platform,
• wherein the processing circuitry is configured for:
• receiving a service request from an external requestor via the network;
• causing the service request to be loaded into the first buffer;
• providing an indication to the computer platform to indicate that the service request is loaded into the first buffer to be pulled into the second buffer of the computer platform;
• responsive to processing of the service request by the computer platform, receiving a message indicating that a response loaded in the second buffer has been pushed to the first buffer;
• and
• communicating the response to the external requestor,
• wherein the indication is the only communication initiated from the external requestor that crosses passes through the canonical network interface card to the computer platform outside control of the computer platform.