Sophos Limited

Dirk Jacobus Van Der Merwe

A method for redirecting data packets includes receiving, by a first virtual ethernet device pair of a computer system having one or more computer processors, at least one data packet, intercepting, by a packet filter deployed by the first virtual ethernet device pair, the at least one data packet, redirecting, by the first virtual ethernet device pair based on the intercepting, the at least one data packet to a second virtual ethernet device pair, executing, by the second virtual ethernet device pair, an express data path data security program on the at least one data packet, and after the express data path security program has been executed on the at least one data packet, redirecting the at least one data packet back to the first virtual ethernet pair. Further disclosed is a computer system and computer program product configured to perform the method.

Data plane framework for redirecting data packets

A method for redirecting data packets includes receiving, by a computer system, at least one data packet, attaching, by an express data path program of the one or more processors of the computer system, a metadata structure to each of the at least one data packet, populating, by the express data path program, the metadata structure with metadata information, redirecting, by the computer system based on the metadata information, the at least one data packet from a network stack path to at least one data security program, executing, by the computer system, the at least one data security program on the at least one data packet including interpreting at least a portion of the metadata information, and after the at least one data security program has been executed on the at least one data packet, redirecting the at least one data packet back to the network stack path.

A firewall host uses a shared memory to pass arguments to, and receive results from, a remote procedure executing on a locally coupled network processing unit that offloads processing for the firewall.

Growing community of inventors

Vancouver, WA, United States of America

Dirk Jacobus Van Der Merwe