Separating network traffic among virtual servers

A computer program product including a non-transitory, computer-readable storage medium which stores executable code, which when executed by a server computer, causes the server computer to perform a method of routing network traffic within the server computer, the method comprising:

• defining (i) multiple virtual servers, each virtual server including a set of IP addresses, (ii) for each of the set of IP addresses of each virtual server, a per-IP routing table identified by that IP address, the per-IP routing table for that IP address specifying a respective interface of the server computer, and (iii) for each of the virtual servers, a per-server routing table specifying an interface specified by a per-IP routing table of that virtual server;
• generating an outbound protocol data unit (PDU) from a particular virtual server;
• selecting, for use by the outbound PDU, one of a per-IP routing table for the particular virtual server or the per-server routing table for the particular virtual server;
• and
• transmitting the outbound PDU to a client via the interface specified by the selected routing table of the particular virtual server, thus isolating the outbound PDU from other virtual servers.

An electronic apparatus constructed and arranged to route network traffic within the electronic apparatus, the electronic apparatus including:

• a network interface;
• memory;
• and
• controlling circuitry couple to the memory, the controlling circuitry being constructed and arranged to:
• define (i) multiple virtual servers, each virtual server including a set of IP addresses, (ii) for each of the set of IP addresses of each virtual server, a per-IP routing table identified by that IP address, the per-IP routing table for that IP address specifying a respective interface of the server computer, and (iii) for each of the virtual servers, a per-server routing table specifying an interface specified by a per-IP routing tables of that virtual server;
• generate an outbound protocol data unit (PDU) from a particular virtual server;
• select, for use by the outbound PDU, one of a per-IP routing table for the particular virtual server or the per-server routing table for the particular virtual server;
• and
• transmit the outbound PDU to a client via the interface specified by the selected routing table of the particular virtual server, thus isolating the outbound PDU from other virtual servers.