Distributed multi-processing security gateway
First Claim
1. A method for network security by a plurality of multi-core processors comprising:
- determining a first multi-core processor of the plurality of multi-core processors using a first data packet received from a host side session;
assigning the first data packet to the first multi-core processor for processing, the processing including;
substituting a host network address in the first data packet with a proxy network address, the proxy network address being used to establish a server side session with a server;
determining a second multi-core processor of the plurality of multi-core processors using the proxy network address received in a second data packet from the server side session; and
assigning the second data packet to the second multi-core processor for processing, the processing including;
substituting the proxy network address in the second data packet with the host network address.
1 Assignment
0 Petitions
Accused Products
Abstract
A system and method for a distributed multi-processing security gateway establishes a host side session, selects a proxy network address for a server, uses the proxy network address to establish a server side session, receives a data packet, assigns a central processing unit core from a plurality of central processing unit cores in a multi-core processor of the security gateway to process the data packet, processes the data packet according to security policies, and sends the processed data packet. The proxy network address is selected such that a same central processing unit core is assigned to process data packets from the server side session and the host side session. By assigning central processing unit cores in this manner, higher capable security gateways are provided.
-
Citations
18 Claims
-
1. A method for network security by a plurality of multi-core processors comprising:
-
determining a first multi-core processor of the plurality of multi-core processors using a first data packet received from a host side session; assigning the first data packet to the first multi-core processor for processing, the processing including; substituting a host network address in the first data packet with a proxy network address, the proxy network address being used to establish a server side session with a server; determining a second multi-core processor of the plurality of multi-core processors using the proxy network address received in a second data packet from the server side session; and assigning the second data packet to the second multi-core processor for processing, the processing including; substituting the proxy network address in the second data packet with the host network address. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A system for distributed networking comprising:
-
a plurality of multi-core processors; and one or more memories, each of the one or more memories coupled to at least one of the plurality of multi-core processors, the one or more memories each storing a respective program of one or more programs, the one or more programs executable by the plurality of multi-core processors to individually or collectively perform a method, the method comprising; determining a first multi-core processor of the plurality of multi-core processors using a first data packet received from a host side session; assigning the first data packet to the first multi-core processor for processing, the processing including; substituting a host network address in the first data packet with a proxy network address, the proxy network address being used to establish a server side session with a server; determining a second multi-core processor of the plurality of multi-core processors using the proxy network address received in a second data packet from the server side session; and assigning the second data packet to the second multi-core processor for processing, the processing including; substituting the proxy network address in the second data packet with the host network address. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17, 18)
-
Specification