Abstract: Techniques are disclosed for managing states at a networking device configured to track connections or bidirectional flows of a communication session in a software defined network (SDN). The networking device has an active processing engine and a passive processing engine. The connection record for an idle connection is maintained in the connection table stored at the passive processing engine, thereby allowing the passive processing engine to maintain connection state information for the idle connection and avoid storing connection state information for the idle connection at the active processing engine.

Abstract: Techniques are disclosed for processing data packets and implementing policies in a software defined network (SDN) of a virtual computing environment. At least one network device is configured to disaggregate enforcement of policies of the SDN from hosts of the virtual computing environment. Tier-0 devices are communicatively coupled to network interfaces of the network device. The network device comprises a plurality of data processing units that are configured to implement functionality of the network device.

Abstract: A virtual network comprising virtual machines executing at a computing environment is implemented. A floating network interface is attached to a software defined networking (SDN) appliance. The floating network interface is configured to provide a connection to computing resources via a virtual network of a virtual computing environment, and the floating network interface is attachable to and detachable from the SDN appliance. The SDN appliance is configured to apply policies of the virtual computing environment to data traffic on the virtual network.