Nicira, Inc.

Jinqiang Yang

Ganesan Chandrashekhar

Bin Qian

Sanal Pillai

Amit Chopra

Dexiang Wang

Chen Li

Rishi Mehta

Sujatha Sundararaman

Naga S S Kishore Kankipati

Certain embodiments described herein are generally directed to allocating security parameter index ('SPI') values to a plurality of endpoints in a network. The SPI values may be derived using an SPI derivation formula and a plurality of parameters. In some embodiments, the SPI values may be derived by an endpoint and in other embodiments by a server. Using the SPI derivation formula and the plurality of parameters enables endpoints and servers to instantaneously derive SPI values without the need for servers to store them.

Systems and methods for allocating SPI values

Computer system and method for characterizing throughput performance of a datacenter utilize bandwidth information of physical network interfaces in the datacenter and results of benchmark testing on throughput on a single processor core to compute a plurality of throughput constraints that define a throughput capacity region for the datacenter to improve throughput performance of the datacenter.

Performance characterization for datacenters

An example method of key management for encryption of traffic in a network having a network nodes includes negotiating, between a first network node and a centralized key management server, to obtain a master key shared among the network nodes; receiving, at the first network node, a first identifier for the first network node and a second identifier for a second network node; generating, at the first network node, a first session key by supplying the master key, the first identifier, and the second identifier as parametric input to a function; establishing, using a network stack of the first network node, a first point-to-point tunnel through the network to the second network node without a key exchange protocol; and sending first traffic from the first network node to the second network node through the first point-to-point tunnel, the first traffic including a portion encrypted by the first session key.

Scalable security key architecture for network encryption

Growing community of inventors

Santa Clara, CA, United States of America

Jinqiang Yang