Aggregating secured packets in a network device

A network device, comprising:

• a network interface to receive secured packets from a remote device over a packet data network, each of the secured packets being secured according to a security protocol and including a respective security protocol header and a Transmission Control Protocol (TCP) packet, which is encrypted according to the security protocol;
• a host device interface to connect the network device to a host device;
• and
• packet processing circuitry to:
• decrypt each of the secured packets based on the respective security protocol header yielding multiple decrypted packets including decrypted TCP packets;
• check that sequence numbers of the multiple decrypted packets form a sequence of consecutive numbers;
• aggregate the decrypted TCP packets into a single aggregated packet responsively to the sequence numbers of the multiple decrypted packets forming a sequence of consecutive numbers;
• and
• provide the single aggregated packet to software running on a processor of the host device via the host device interface.

A system, comprising:

• a network device including:
• a network interface to receive secured packets from a remote device over a packet data network, each of the secured packets being secured according to a security protocol and including a respective security protocol header and a Transmission Control Protocol (TCP) packet, which is encrypted according to the security protocol;
• a host device interface to connect the network device to a host device;
• and
• packet processing circuitry to:
• decrypt each of the secured packets based on the respective security protocol header yielding multiple decrypted packets including decrypted TCP packets;
• aggregate the decrypted TCP packets into a single aggregated packet;
• and provide the single aggregated packet to software running on a processor of the host device via the host device interface;
• and
• the host device to run the software to:
• receive the single aggregated packet;
• and
• decapsulate the given security protocol header from the aggregated packet.