公开(公告)号：US20230066604A1

公开(公告)日：2023-03-02

申请号：US17461811

申请日：2021-08-30

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： HUIMENG HUANG ,  JIANPO HAN ,  QIWEI CHANG

IPC: H04L29/06

Abstract: A packet that includes a header and a payload can be acquired. A first portion of the payload can be selected such that the first portion that is smaller than the payload. The header and the first portion of the payload can be encrypted based on an encryption algorithm to generate an encrypted packet. The encrypted packet can be transmitted to a node on a network.

公开(公告)号：US20230262035A1

公开(公告)日：2023-08-17

申请号：US17672011

申请日：2022-02-15

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： HUIMENG HUANG ,  Jianpo Han ,  Zhijun Ren ,  Chunfeng Wang

IPC: H04L9/40

CPC classification number: H04L63/0485 ,  H04L63/029 ,  H04L63/164

Abstract: Systems are methods are provided for implementing load balancing of IPsec security associations (SAs) SAs between different heterogeneous cores, for example in a multiple controller systems. The balancing of IPsec SAs are performed using software implementations of IPsec offloading and/or hardware implementations of IPsec offloading. By balancing the processing functions related to orchestration of IPsec SAs between hardware (e.g., IPsec hardware accelerator) and software (e.g., IPsec software accelerator), the methods realize increased optimization, improved user experience, and enhanced product performance in networks using IPsec. For example, an IPsec session is initiated, and it is determined whether a resource limitation for a hardware-based IPsec accelerator has been reached. If the limitation for the hardware-based IPsec accelerator has been reached, processing for the IPsec SA for the initiated IPsec session is offloaded to a software-based IPsec accelerator.