公开(公告)号：US20220231993A1

公开(公告)日：2022-07-21

申请号：US17213321

申请日：2021-03-26

Applicant: VMWARE, INC.

Inventor： AWAN KUMAR SHARMA ,  YONG WANG ,  SOURABH BHATTACHARYA ,  BHARGAV PUVVADA ,  SARTHAK RAY ,  MAYUR KATKE

IPC: H04L29/06 ,  H04L12/713 ,  H04L12/721

Abstract: A method for IPSec communication between a source machine and a destination machine is provided. The method includes receiving, at the destination machine, first and second packets from the source machine through first and second VPN tunnels established between a first VTI of the source machine and a second VTI of the destination machine; determining the first packet corresponds to a first SA and the second packet corresponds to a second SA; processing, by a first processing core, the first packet based on the first SA, and processing, by a second processing core, the second packet based on the second SA; and updating, at the second VTI, states of one or more flows based on the first and second packets, the second VTI providing one or more stateful services for the one or more packet flows based on the one or more states.

公开(公告)号：US20230020509A1

公开(公告)日：2023-01-19

申请号：US17492723

申请日：2021-10-04

Applicant: VMWARE, INC.

Inventor： AWAN KUMAR SHARMA ,  YONG WANG ,  SOURABH BHATTACHARYA ,  DEEPIKA KUNAL SOLANKI ,  SARTHAK RAY ,  JOCHEN BEHRENS

IPC: H04L12/707 ,  H04L12/717 ,  H04L12/721 ,  H04L29/06

Abstract: Described herein are systems, methods, and software to manage replay windows in multipath connections between gateways. In one implementation, a first gateway may receive a packet directed toward a second gateway and identify a path from a plurality of paths to the second gateway. Once identified, the first gateway may increment a sequence number associated with the path and encapsulate the packet with a unique identifier for the path in the header with the incremented sequence number. The first gateway the communicates the encapsulated packet to the second gateway.