Secure receive packet processing for network function virtualization applications

A method comprising:

• mapping, by an operating system (OS), a receive ring into a first memory of an application, wherein the mapping includes a permission that prevents modification of a plurality of descriptors;
• mapping, by the OS, the first memory into a second memory of a kernel;
• and
• receiving, by the OS, a request to rearm the plurality of descriptors by a rearming thread, wherein
• the rearming thread is notified that a batch size limit is reached by a packet processing thread, and
• the packet processing thread reads and retrieves packet information;
• and initializing, by the OS, the first descriptor of the plurality of descriptors.

A method comprising:

• reading, by a packet processing thread, a receive ring, wherein
• the receive ring includes packets, and
• the packets have packet information;
• retrieving, by the packet processing thread, the packet information within the receive ring;
• processing, by the packet processing thread, the packets;
• notifying, by the packet processing thread, a rearming thread that a batch size limit is reached;
• and
• requesting, by the rearming thread, an OS to rearm a plurality of descriptors.