Transparent IPSec processing inline between a framer and a network component
AssigneeCavium Networks, Inc.
InventorsRichard E. Kessler, Muhammad R. Hussain
Life of this patent
Estimating the term…
Abstract
A method and apparatus for transparent processing of IPsec network traffic by a security processor in line between a framer and a network processor. Security processor parses packet header and tail information to determine if encryption or decryption is required. After encryption or decryption is completed packet header and tail information is modified to reflect the changes in the packet such as length of the packet. The modified packet is then passed on to the network processor or framer.
Claims25
An apparatus comprising:
- a security processor to be inline between a framer and a network processor, the security processor to process an IPsec protocol layer without terminating any other protocol layer.
An apparatus comprising:
- a first circuit to determine a protocol type of a packet;
- at least one execution unit coupled to the first circuit, the at least one execution unit to decrypt an encrypted protocol layer of the packet;
- a second circuit to correct protocol layer data after decryption;
- and
- a third circuit coupled to second circuit to communicate with a framer.
A method comprising:
- receiving a packet;
- parsing the packet to determine the level two protocol information in the packet;
- processing an IPsec protocol layer;
- altering the packet to correct header information;
- and
- sending a packet to a framer device.
An apparatus comprising:
- means for receiving a packet;
- means for parsing the packet to determine the level two protocol information in the packet;
- means for processing an IPsec protocol layer;
- means for correcting protocol layer information after processing;
- and
- means for sending a packet to a framer device.
A system comprising:
- a framer device;
- a network processor;
- and
- a security processor couple between the framer device and the network processor, the security processor to process an IPsec protocol layer without terminating any other protocol layer.
A machine-readable medium that provides instructions, which when executed by a machine cause the machine to perform operations comprising:
- processing a packet received from a framer device to determine the type of protocol layers included in the packet;
- processing the packet to decrypt an IPsec protocol layer;
- and
- modifying the packet to include a decrypted IP protocol layer and protocol layer information based on the decrypted IP protocol layer.
Dependencies are inferred from the claim text.