Abstract: Methods and apparatus, including computer program products, implement techniques of processing data packets in a computer network. The computer network includes a multiport network device and a computer executing a software application. The multiport network device is configured to receive data packets to be transmitted using the computer network and the network device stores one or more authorized network descriptors. The software application generates data packets to be transmitted to the computer network through the network device. The software application registers the network rights descriptor with the network device and inserts the network rights descriptor in each generated data packet. The network device is configured to discard the data packet if the network rights descriptor in the data packet does not match an authorized network rights descriptor and to process the data packet if the network rights descriptor in the data packet matches an authorized network rights descriptor.

Abstract: Methods and apparatus, including computer program products, implement techniques for processing data packets in a computer network. A multilayer switch is configured to process data packets at wire-speed based on one or more user defined packet policies. Each user defined packet policy specifies information for one or more of Layers 4 through 7. A multilayer switch receives the data packet, the data packet including information from Layers 2 through 7 of the OSI model. The received data packet is examined to determine if there is a match between the data packet and one or more of the packet policies, where each packet policy authorizes matching data packets to use the computer network. If there is a matching packet policy authorizing the data packet, the data packet is routed using the Layer 2-3 switch. If there is no matching packet policy authorizing the data packet, the data packet is blocked.

Abstract: Methods and apparatus, including computer program products, implement techniques for processing data packets in a computer network. A packet filter engine is configured to process data packets at wire-speed based on or more user defined packet policies. A received data packet is examined to determine if there is a match between the data packet and one or more packet policies. If no matching packet policies are found, the packet is routed. If a matching packet policy is found, the data packet is processed based on the policy action fields of the matching policy.