Abstract: A request for information to verify integrity of program code of a first processor enclave is received from a remote requestor via a network. The requested information is provided. Private information for use by the program code of the first processor enclave is received. The program code of the first processor enclave is used to select based at least in part on the received private information a second processor enclave among a plurality of different processor enclave options. Integrity of program code of the selected second processor enclave is verified. At least a portion of the received private information is provided to the selected second processor enclave for processing by the verified program code of the selected second processor enclave.

Abstract: The disclosed computer-implemented method may include (i) configuring a packet filtering policy at least in part by defining an attribute map and a set of network-packet filtering rules that use logical groupings of distinguishing attributes as input parameters, (ii) after configuring the packet filtering policy, receiving an incoming network packet, (iii) extracting distinguishing attributes from the incoming network packet, (iv) translating, based on the attribute map, the distinguishing features extracted from the incoming network packet into logical groupings associated with the network packet, and (v) applying the packet filtering policy to the incoming network packet by using the logical groupings associated with the network packet as input parameters to the filtering rules. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Techniques are presented herein for receipt/transmission of packets to/from a host via a connected input/output (IO) device. In general, a packet is associated with a payload, an inner packet header, and an outer overlay header. The IO device is configured to perform independent offload operations on the inner packet header and the outer overlay header.

Abstract: Techniques are presented herein for receipt/transmission of packets to/from a host via a connected input/output (IO) device. In general, a packet is associated with a payload, an inner packet header, and an outer overlay header. The IO device is configured to perform independent offload operations on the inner packet header and the outer overlay header.

Abstract: Techniques are presented herein for receipt/transmission of packets to/from a host via a connected input/output (IO) device. In general, a packet is associated with a payload, an inner packet header, and an outer overlay header. The IO device is configured to perform independent offload operations on the inner packet header and the outer overlay header.

Abstract: An example method for a distributed NetFlow exporter with a single IP endpoint in a network environment is provided and includes configuring a network protocol stack of an exporter with switched virtual interface (SVI) state information of an SVI associated with a switch in a network, retrieving flow data from a NetFlow cache, and communicating the flow data to a collector according to the configured network protocol stack. Although the communication bypasses the SVI, the collector perceives the flow records as being communicated by the SVI. The SVI state information includes a public Internet Protocol (IP) address and a Media Access Control (MAC) address of the SVI, where the exporter executes on an adaptor of a server in the network. The method also includes configuring a destination IP address and a destination MAC address on the exporter according to a NetFlow policy.

Abstract: A notification from a source host is received at a network interface device that indicates that a data packet is ready for transmission to a destination host. The data packet may be transmitted to the destination host via the network interface device, and a first completion queue event is generated. The first completion queue event may be used as a trigger to re-transmit the data packet to a port mirroring destination via the network interface device. In another example, a network interface device receives a data packet transmitted from a source host to a destination host. A first completion queue event is generated based on the receipt of the packet, and is used as a trigger to re-transmit the data packet to a port mirroring destination via the network interface device.

Abstract: Techniques are presented herein for receipt/transmission of packets to/from a host via a connected input/output (IO) device. In general, a packet is associated with a payload, an inner packet header, and an outer overlay header. The IO device is configured to perform independent offload operations on the inner packet header and the outer overlay header.

Abstract: An example method for a distributed NetFlow exporter with a single IP endpoint in a network environment is provided and includes configuring a network protocol stack of an exporter with switched virtual interface (SVI) state information of an SVI associated with a switch in a network, retrieving flow data from a NetFlow cache, and communicating the flow data to a collector according to the configured network protocol stack. Although the communication bypasses the SVI, the collector perceives the flow records as being communicated by the SVI. The SVI state information includes a public Internet Protocol (IP) address and a Media Access Control (MAC) address of the SVI, where the exporter executes on an adaptor of a server in the network. The method also includes configuring a destination IP address and a destination MAC address on the exporter according to a NetFlow policy.

Abstract: A notification from a source host is received at a network interface device that indicates that a data packet is ready for transmission to a destination host. The data packet may be transmitted to the destination host via the network interface device, and a first completion queue event is generated. The first completion queue event may be used as a trigger to re-transmit the data packet to a port mirroring destination via the network interface device. In another example, a network interface device receives a data packet transmitted from a source host to a destination host. A first completion queue event is generated based on the receipt of the packet, and is used as a trigger to re-transmit the data packet to a port mirroring destination via the network interface device.