公开(公告)号：US20210185025A1

公开(公告)日：2021-06-17

申请号：US16714838

申请日：2019-12-16

Applicant: VMware, Inc.

Inventor： Yong WANG ,  Jochen BEHRENS

IPC: H04L29/06 ,  G06F9/50 ,  G06F9/455

Abstract: Example methods and computer systems for receive-side processing for encapsulated encrypted packets. One example may comprise: in response to receiving, over a tunnel, a first encapsulated encrypted packet that includes a first encrypted inner packet and a first outer header, generating a first decrypted inner packet by performing decryption and decapsulation; and based on content of the first decrypted inner packet, assigning the first decrypted inner packet to a first processing unit. The method may further comprise: in response to receiving, over the tunnel, a second encapsulated encrypted packet that includes a second encrypted inner packet and a second outer header, generating a second decrypted inner packet by performing decryption and decapsulation; and based on content of the second decrypted inner packet, assigning the second decrypted inner packet to a second processing unit, thereby distributing post-cryptography processing over multiple processing units.

公开(公告)号：US20220217006A1

公开(公告)日：2022-07-07

申请号：US17141226

申请日：2021-01-05

Applicant: VMware, Inc.

Inventor： Dexiang WANG ,  Xinhua HONG ,  Yong WANG ,  Yu YING ,  Jochen BEHRENS

IPC: H04L12/18 ,  H04L29/08

Abstract: Example methods and systems for multicast packet handling based on flow cache information are described. In one example, a network element may configure flow cache information associated with a multicast flow. The flow cache information may specify a set of actions that is configured based on a sequence of function calls. In response to detecting a multicast packet associated with the multicast flow, fast-path processing may be performed based on the flow cache information. This may include executing a replication action to generate a first packet replica and a second packet replica. First processing action(s) may be executed to process the first packet replica to generate and send a first output packet towards a first multicast destination. Second processing action(s) may be executed to process the second packet replica to generate and send a first output packet towards a second multicast destination.