Method for establishing IPSEC tunnels
AssigneeIntel Corporation
InventorsJames L. Jason, Michael D. Jeronimo, Ylian Saint-Hilaire
Life of this patent
Estimating the term…
Abstract
A method and a system for establishing network tunnels are disclosed. In one embodiment, a transport action is identified in response to packet parameters. Once the transport action is determined, the transport action is pushed onto a pending stack. When a tunnel action is, subsequently, identified in response to the packet parameters, the tunnel action is also pushed onto the pending stack. Upon completion of rule evaluation, at least one tunnel is established according to a tunnel action stored in the pending stack. The action stored at the top of the pending stack is performed first and the action stored at the bottom of the pending stack is performed last.
Claims21
A method for establishing network tunnels comprising:
- identifying a transport action in response to packet parameters;
- pushing at least one said transport action onto a pending stack;
- identifying a tunnel action in response to said packet parameters;
- pushing at least one said tunnel action onto said pending stack;
- and
- setting up at least one tunnel in response to said pending stack, said tunnel action stored at top of said pending stack being performed first and said tunnel action stored at bottom of said pending stack being performed last.
An article of manufacture for establishing network tunnels to improve network security, the article of manufacture comprising a machine readable medium having machine readable program code embodied in the medium, the program code comprising:
- identifying transport actions from transport rules;
- pushing at least one said transport action onto a pending stack;
- identifying tunnel actions from tunnel rules;
- pushing at least one tunnel action onto said pending stack;
- and
- setting up at least one tunnel in response to said pending stack, said tunnel action stored at top of said pending stack being performed first and said tunnel action stored at bottom of said pending stack being performed last.
An apparatus for establishing network tunnels comprising:
- means for identifying transport actions from transport rules;
- means for pushing at least one said transport action onto a pending stack;
- means for identifying tunnel actions from tunnel rules;
- means for pushing at least one tunnel action onto said pending stack;
- and
- means for setting up at least one tunnel in response to said pending stack, said tunnel action stored at top of said pending stack being performed first and said tunnel action stored at bottom of said pending stack being performed last.
An apparatus of claim further comprising means for continuing to remove tunnels until said completed stack becomes empty.
Dependencies are inferred from the claim text.