Per-port data security bypass for network devices

A network device comprising:

• a set of ports;
• a set of processing units;
• and
• a non-transitory machine-readable medium storing instructions that when executed by at least one processing unit in the set of processing units cause the at least one processing unit to:
• receive a piece of network data comprising a set of headers;
• based on a set of values in the set of headers of the piece of network data, determine whether the piece of network data is precision time protocol (PTP) network data and a particular port in the set of ports of the network device through which the piece of network data is to be forwarded;
• based on the particular port, determine a port profile from a set of port profiles, wherein each port profile in the set of port profiles is associated with a port in the set of ports and comprises a field for indicating whether to bypass data security operations on PTP network data that egress through the port;
• based on a value of the field in the port profile and the determination of whether the piece of network data is PTP network data, determine whether to bypass a set of data security operations on the piece of network data;
• and
• transmit the piece of network data through the particular port of the network device.

A circuit comprising:

• a first set of circuits configured to receive a piece of network data comprising a set of headers and, based on a set of values in the set of headers of the piece of network data, determine whether the piece of network data is precision time protocol (PTP) network data and a particular port in the set of ports of the network device through which the piece of network data is to be forwarded;
• a second set of circuits configured to, based on the particular port, determine a port profile from a set of port profiles, wherein each port profile in the set of port profiles is associated with a port in the set of ports and comprises a field for indicating whether to bypass data security operations on PTP network data that egress through the port and, based on a value of the field in the port profile and the determination of whether the piece of network data is PTP network data, determine whether to bypass a set of data security operations on the piece of network data;
• and
• a third set of circuits configured to transmit the piece of network data through the particular port of the network device.