This paper describes Solarflare’s modifications to the Xen networking architecture that allow guest kernels direct but secure access to the networking hardware, while preserving support for migration. The paper also briefly describes how the same technology is used to grant direct network access to user-level applications and thus provide even greater efficiency in terms of bandwidth, latency and central processing unit (CPU) utilization.