Figure 2-2 shows an access control list (ACL) filter implemented on the NPAC. An ACL filter permits or denies traffic entering or leaving a network interface based on a set of predefined security rules. In this example, Ethernet traffic from the on-chip Ethernet switch is sent to the NPAC through the dedicated, low-latency packet bus. The traffic is then depacketized into IP frames, authenticated and decrypted, and run through an ACL filter to allow only authorized packets through. A routing lookup is then performed, and the packet is routed to the SoC processing cores for additional processing or sent out through the Ethernet network.

Figure 2-3 shows a CAN packet protocol data unit (PDU) routing function commonly used in zone controller gateways. Incoming CAN packets are decrypted, authenticated and then routed based on an AUTOSAR PDU routing table.

In both the ACL filter and PDU routing examples, all packet processing is done without the support from the SoC processing cores.