Abstract:
The disclosure is directed towards systems and methods for segmenting network traffic using virtual media access control (vMAC) addresses. A device intermediary to a plurality of clients and a plurality of servers establishes a plurality of traffic domains to segment network traffic. The device generates a plurality of vMAC addresses to assign to the plurality of traffic domains. Each of the vMAC addresses can include an identifier of a traffic domain corresponding to the traffic domain to which the vMAC address is assigned. The device receives, from a second device, an address resolution protocol (ARP) request to determine a media access control (MAC) address to transmit data packets. The device selects, from the plurality of virtual MAC addresses, the virtual MAC address to use as the MAC address in a response based on an internet protocol (IP) address identified via the ARP request. The device then transmits, to the second device, a response to the request. The response can identify, as the MAC address, the selected vMAC address of a traffic domain.
Abstract:
The disclosure is directed towards systems and methods for performing service tag switching. A device intermediary to a client and a server receives a packet including a virtual network device identifier tag that identifies a list of functions to be performed on the packet. The device tags the packet with a first service tag identifying a first functional entity of the device to which to route the packet. The device routes the packet to the first functional entity configured to perform a first function. Responsive to the first function being performed, the device selects a subsequent service tag identifying a subsequent functional entity to route the packet. The device tags the packet with the subsequent service tag and routes the packet to the subsequent functional entity. Once all of the list of functions to be performed on the packet have been performed, the device forwards the packet to its destination.