Stateless tunnels

One or more tangible processor-readable storage media of a tangible article of manufacture encoding processor-executable instructions for executing on a computer system a process of tunneling a data packet through a network communicatively connected to a datacenter, the datacenter being uniquely addressed within the network, the datacenter having a different internal address space than the network, the process comprising:

• recording transformation rules for a programmable packet filter in the datacenter;
• receiving the data packet in the programmable packet filter of a host computing device in the datacenter;
• converting in the programmable packet filter of the host computing device the received data packet between a stateless tunneling data packet and a datacenter data packet according to the recorded transformation rules, the datacenter data packet being uniquely addressed within the internal address space of the datacenter, the received data packet bypassing any virtual machine processing in the host computing device during the converting;
• and
• transmitting the converted data packet from the programmable packet filter in the datacenter.