Does the DOCA AppShield use the DMA controller on the host or the one on the DPU?

I want to use bluefield2 to develop security app using appshield API.
I’m wondoring appshield DMA process such as doca_apsh_pslist(sample program) uses host’s DMA controller or DPU’s DMA controller when it gets host’s memory.
Actually I don’t figure out whether bluefield2 has original DMA controller of itself or not.

If you have any knowledge or document that can help me, please let me know.
Thank you.