This is great stuff guys. When I ran the McAfee Personal Firewall group we came up to Seattle in 2003 to talk about what we wanted to see in the stack to make implementing our products easier. Great to see not only that this has all worked out with the improvements over TDI, but the performance improvements as well.So much stuff we used to have to do ourselves, now baked in. Very cool, but I remain glad I got out of that line of business Is the deep stuff going to be exposed to .NET? Will it be possible to write complex security apps solely in managed code?
One of the best interviews i've seen, these seem like a greate bunch of gyes that realy get into there work and have greate personalities. There is nothing more boring than when you interview someone with no sens of humour, not the case here, greate buch of gyes.
You may want to take a look at the IO Completion port architecture – that will let you work with thousands of sockets on very few threads and the programming model is quite intuitive.Thanks.
My previous response was to staceyw.
Tragic_hip: if the firewall/NAT is doing IP level forwarding/natting ONLY, then the improvements will work through them as well. On the other hand, if that device is doing split TCP connection, it may not.
The new congestion control algorithm is Microsoft’s intellectual property. We have not explored the possibility of backporting this to XP yet.
MyCroft: This is not FAST – it is called CTCP (Compound TCP).