Back to results
US 8,045,550 B2Granted
Packet tunneling
AssigneeHewlett-Packard Development Company, L.P.
InventorsBruce E. LaVigne, Mark Gooch, Alan R. Albrecht, Mauricio Sanchez, Steven G. Jorgensen
Life of this patent
Estimating the term…
Abstract
Network devices, systems, and methods are provided for packet processing. One network device includes a network chip having a number of network ports for the device. The network chip includes logic to select original data packets, based on a set of criteria, received from or destined to a particular port on the device and to tunnel the selected data packets to a second network device having a different destination address to that of the selected data packets.
Claims20
A network device, comprising:
- a network chip including logic and a number of network ports for the device for receiving and transmitting packets therefrom, at least one of the network ports directly connected to a network client;
- and
- wherein the logic is to:
- select original data packets, based on a set of criteria,
- tunnel encapsulate the selected original data packets to tunnel the encapsulated data packets to a second network device having a different destination address than an original destination address of the selected original data packets, wherein the second network device is connected to a network appliance, and
- receive the selected original data packets back from the second network device following processing on the selected original data packets by the network appliance, wherein the selected original data packet is tunnel encapsulated,
- decapsulate the tunnel encapsulated data packets received from the second network device, and
- send the selected original data packets to the original destination address of the selected original data packets.
5 more elements
A network, comprising:
- a network client;
- a first network device directly connected to the network client;
- a second network device having ports to receive data packets from the first network device;
- a network appliance connected to the second network device, said network appliance comprising an intrusion detection system;
- and
- wherein the first network device includes:
- a network chip including logic and a number of network ports for the device for receiving and transmitting packets therefrom;
- and
- wherein the logic is to:
- select original data packets, based on a set of criteria,
- tunnel encapsulate the selected original data packets to secure tunnel the encapsulated data packets to the second network device prior to sending the selected original data packets to an original media access control (MAC) destination address,
- receive the selected original data packets back from the second network device following processing on the selected original data packets by the network appliance, wherein the selected original packet is tunnel encapsulated,
- decapsulate the tunnel encapsulated data packets received from the second network device, and
- send the selected original data packets to the original MAC destination address of the original data packets.
11 more elements
A method for processing packets, comprising:
- receiving a network packet from a port on a first network device, the network packet including a media access control (MAC) destination address, the first network device directly connected to a network client;
- encapsulating the network packet to secure tunnel the network packet to a second network device having a MAC destination address different from the MAC destination address of the network packet in a manner that is transparent to the network packet, wherein encapsulating the network packet comprises encapsulating the network packet in response to selecting the network packet based on a set of criteria;
- receiving the selected original data packet back from the second network device following processing on the selected original data packets by a network appliance, wherein the selected original data packet is tunnel encapsulated;
- decapsulating the tunnel encapsulated data packets received from the second network device;
- and
- sending the selected original data packets to the original MAC destination address.
3 more elements
A network device, comprising:
- a network chip including logic and a number of network ports for the device for receiving and transmitting packets therefrom;
- and
- wherein the logic is to select original data packets, based on a set of criteria, is to tunnel encapsulate the selected original data packets to tunnel the encapsulated data packets to a second network device having a different destination address from an original destination address of the selected original data packets, wherein the second network device is connected to a network appliance;
- wherein the second network device includes logic to decapsulate the encapsulated data packets and to send the selected original data packets to the network appliance;
- wherein the second network device includes logic to tunnel encapsulate the selected original data packets returned from the network appliance and to tunnel the selected data packets back to the network device from which the second network device originally received the selected data packets;
- wherein the network device includes logic to decapsulate the selected data packets returned from the second network device and to send the selected original data packets to the original destination address of the selected original data packets;
- and
- wherein the network device includes logic to recognize whether the selected original data packets have already been sent to the network appliance so as not to resend the selected original data packets to the network appliance.
5 more elements
Dependencies are inferred from the claim text.