DNOS 9.x is also modular where different parts of the OS run independentindependently from each other within one switch: if one process would fail the impact on other processes on the switch are limited. This modular setup is also taken to the hardware level in some product-lines where a routing-module has three separate CPUs: one for management, one for L2 and one for L3 processing. This same approach is also used in the newer firmware-families from Cisco like the [[NX-OS]] for the Nexus product-line or the [[IOS XR]] for the high-end routers (the [[Carrier Routing System]]s) from [[Cisco Systems|Cisco]]. (and unlike the original [[IOS]]: processes under IOS aren't isolated from each other). This approach is regarded not only a way to make the firmware more resilient but also increases the security of the switches<ref>Communication Security Establishment Canada (CSEC) on [http://www.cse-cst.gc.ca/its-sti/services/cc/force-networks-v10-eng.html Force10 FTOS 7.8] {{webarchive|url=https://web.archive.org/web/20110819231415/http://www.cse-cst.gc.ca/its-sti/services/cc/force-networks-v10-eng.html |date=2011-08-19 }}</ref><ref>CSEC report on [http://www.cse-cst.gc.ca/documents/services/cc/force-networks-v10-sec-eng.pdf Security Target: Force10 Networks FTOS 7.8] {{webarchive|url=https://web.archive.org/web/20130604142300/http://www.cse-cst.gc.ca/documents/services/cc/force-networks-v10-sec-eng.pdf |date=2013-06-04 }}, published: 17 August 2009, retrieved: 28 January 2012</ref>
