System and method for internet protocol security processing
AssigneeFreescale Semiconductor, Inc.
InventorsJyothi Vemulapalli, Srinivasa Rao Addepalli
Life of this patent
Estimating the term…
Loading patent…
AssigneeFreescale Semiconductor, Inc.
InventorsJyothi Vemulapalli, Srinivasa Rao Addepalli
Estimating the term…
A decentralized method for IPSec processing in virtual environments includes assigning a unique identifier to each of a set of compute nodes. Each compute node can emulate one or more virtual machines that generate IP packets for forwarding over a network (e.g., the Internet). An IP packet, received from a trusted source at a compute node, is encrypted and a trailer is appended to the encrypted packet. The trailer includes the unique identifier of the compute node. The encrypted packet with appended trailer is forwarded to a secure gateway that can perform an anti-replay check using stored parameters corresponding to the unique identifier in the trailer. In inbound processing, the unique identifier is inserted into a trailer appended to an encrypted packet by the security gateway and a VPN server directs the incoming encrypted packet to the appropriate compute node for forwarding to the virtual machine.
A method of processing IP packets, the method comprising:
A first network device for processing IP packets, wherein the first network device has a unique identifier associated therewith, the first network device comprising:
A system for processing IP packets, the system comprising:
Dependencies are inferred from the claim text.