Nicira, Inc.

Calvin Qian

Bin Zan

Gang Xu

Ganesan Chandrashekhar

Sanal Pillai

Dexiang Wang

Dan Wing

Sujatha Sundararaman

Kishore Kankipati

An approach for an adaptive, performance-oriented, and compression-assisted encryption scheme implemented on a host computer to adaptively improve utilization of CPU resources is provided. The method comprises queueing a new data packet and determining a size of the new data packet. Based on historical data, a plurality of already encrypted data packets is determined. Based on information stored for the plurality of already encrypted data packets, an average ratio of compression for the plurality of already encrypted data packets is determined. Based on the average ratio of compression, a throughput of compression value and a throughput of encryption value, a prediction whether compressing the new data packet will reduce a CPU load is derived. If it is determined that compressing the new data packet will improve utilization of the CPU resources, then a compressed new data packet is generated by compressing the new data packet.

Adaptive, performance-oriented, and compression-assisted encryption scheme

Certain embodiments described herein are generally directed to enabling a group of host machines within a network to securely communicate an unknown unicast packet. In some embodiments, a key policy is defined exclusively for the secure communication of unknown unicast packets. The key policy is transmitted by a central controller to the group of host machines for negotiating session keys among each other when communicating unknown unicast packets.

Supporting unknown unicast traffic using policy-based encryption virtualized networks

Certain embodiments described herein are generally directed to a first host machine exchanging a Security Parameter Index (SPI) value with a second host machine by storing the SPI in an options field of an encapsulation header of an encapsulated packet.

Systems and methods for storing a security parameter index in an options field of an encapsulation header

Growing community of inventors

Fremont, CA, United States of America

Calvin Qian