Embodiments of the subject disclosure concern a method implemented using network interface controller circuitry for use in association with host computer circuitry. The host computer circuitry is to execute, when the host computer circuitry is in operation, a Linux operating system and a user space application, the Linux operating system, when executed, having a kernel space. The method comprises: programming packet processing hardware offload circuitry of the network interface controller circuitry, based upon packet filter rule data, to implement packet filter rules corresponding to the packet filter rule data; and determining by the network interface controller circuitry, based upon header data of at least one incoming packet and the packet filter rule data, at least one action to apply to the at least one incoming packet. The packet filter rules comprise the at least one action and are to be set using at least one call associated with the kernel space. The at least one action is configurable to include: at least one network address translation-related operation associated with the header data; dropping the at least one incoming packet; and/or forwarding the at least one incoming packet. When the host computer circuitry is in the operation, after registration of at least one device driver of the network interface controller circuitry: the packet filter rule data is to be associated with the network interface controller circuitry via at least one callback function call; and the programming, of the packet processing hardware offload circuitry of the network interface controller circuitry is to be implemented by the at least one device driver associated with the network interface controller circuitry via code references to be associated with the at least one device driver associated with the network interface controller circuitry.
展开▼
