Transport layer security offload to a network interface

An apparatus comprising:

• interface circuitry and
• a network interface coupled to the interface circuitry, the network interface to:
• in response to a data transmit request, perform at least one operation offloaded from a host of a Transport Layer Security (TLS) encryption operation and at least one operation offloaded from the host of segmentation of a first TLS record data prior to transmission of the first TLS record data in two or more packets;
• in response to a re-transmission request of a non-received packet, of the two or more packets, perform at least one operation offloaded from the host to identify the non-received packet with a portion of the first TLS record data and re-transmit solely the non-received packet with less than an entirety of the first TLS record data.

An apparatus comprising:

• interface circuitry and
• a network interface coupled to the interface circuitry, the network interface to:
• in response to a packet receipt:
• perform at least one operation offloaded from a host of reassembly of data and Transport Layer Security (TLS) decryption of TLS record data received in one or more packets;
• store one or more segments of the TLS record data from at least one received packet in memory despite non-receipt of a segment of the TLS record data;
• based on receipt of at least one packet that includes solely the at least one non-received segment of the TLS record data, perform at least one operation offloaded from the host of decryption of the TLS record data;
• in response to a data transmit request, perform at least one operation offloaded from the host of TLS encryption operation and segmentation of a first TLS record data prior to transmission of the first TLS record data in two or more packets;
• and
• in response to a re-transmission request of a non-received packet, of the two or more packets, perform at least one operation offloaded from the host to identify the non-received packet and re-transmit solely the non-received packet with less than an entirety of the first TLS record data.