-----BEGIN PGP SIGNED MESSAGE-----


  You haven't explained why doing this is a good thing. I didn't know
"we" wanted to do it.

  If you want to do anything, you should consider creating a virtual
user space (a fellow at HAL calls this the "Domain" space): something
that isn't in the kernel, but is still protected from the user space,
and is common to all user processes. 

  The user code is able to access the space through call gates or
something like that, but the domain code doesn't have to copy in/out
to get at the user space, and can do things like TCP checksums
directly from the user's buffer.

  Very high performance TCP applications benefit by getting rid of the
socket layer, and by retransmitting directly from the user space
buffers. Think multimedia HTTP servers.
  Note that: TCP moves, but IP stays priveledged. IP does mutate a lot.

  Parts of X servers also live in this space. 

  Obviously this is rather Mach like, and maybe people that want to do
this should just move to NetBSD over Mach.

   :!mcr!:            |  Network security consulting and 
   Michael Richardson |      contract programming
 WWW: mcr@sandelman.ottawa.on.ca. PGP key available.

  
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface

iQB1AwUBM1uLWaZpLyXYhL+BAQFVZQMAhIviWoS2V2GCv5xnBrHwAKHkA8tlsCg7
CaNDhCRRG2TESimEpgyH0ryiENQzhFOUhXxS0lI8tJVBun9otOKCoVt7MhV0NYP2
T1fBjVu0erng7BcZI8w5vA6F10RCHHdW
=IH6u
-----END PGP SIGNATURE-----