Abstract: Techniques are disclosed relating to multi-factor authentication for data security. In some embodiments, a computer system receives, from a user device, a database operation request that specifies a set of query data, where the computer system supports multiple different security levels requiring different subsets of a set of authentication factors supported by a known device of a user of the user device. Various devices may determine current contextual information for the database operation request, where the contextual information indicates the set of query data. In some embodiments, the computer system selects, based on the current contextual information, a security level from the multiple different security levels. In some embodiments, the computer system revokes, based on the selected security level, access privileges of the user for accessing a database corresponding to the database operation request.

Abstract: Embodiments include a method of opening a Quick User Datagram Protocol (UDP) Internet Connections (QUIC) socket on a computing platform, initializing QUIC packet processing of a hardware-based offloader, opening a QUIC connection to the offloader, and transmitting a first QUIC packet to the offloader over the QUIC connection. The hardware-based offloader encrypts and transmits the QUIC packet.

Abstract: Particular embodiments described herein provide for a system for enabling communication between a packet processing unit and a network interface controller (NIC) using an extension object, the system can include memory, one or more processors, and a processing unit extension object engine. The processing unit extension object engine can be configured to cause a packet to be received at the packet processing unit, where the packet processing unit is on a system on chip (SoC), add an extension object portion to the packet to create a modified packet, and cause the modified packet to be communicated to the NIC located on the same SoC. In an example, the extension object portion includes type data and partition data. The packet can be an Ethernet packet and the extension object portion can be added before a payload portion of the packet.

Abstract: Examples described herein relate to a network interface device that includes first circuitry to negotiate supported timestamp parameters and selectively translate a timestamp associated with a packet based on the timestamp parameters and second circuitry to cause transmission of the packet based on the translated timestamp. In some examples, selectively translate a timestamp associated with a packet based on the timestamp parameters includes translates a value of the timestamp in a transmit descriptor associated with the packet.

Abstract: Technologies for hairpinning network traffic include a compute device with a network interface controller (NIC) configured to receive, by a virtual Ethernet port aggregator (VEPA) agent of a media access control (MAC) of the NIC, a network packet from a virtual machine (VM). The VEPA agent is configured to transmit the received network packet to an agent deployed on an accelerator device of the NIC and the agent is configured to forward the received network packet to a virtual Ethernet bridge (VEB) hairpin agent of the accelerator device. The VEB hairpin agent is configured to determine whether a target destination of the network packet corresponds to another VM, return the received network packet to the agent deployed the accelerator device. The agent is further configured to forward the received network packet to the VEPA agent, which is further configured to transmit the received network packet to the other VM.

Abstract: Embodiments include a method of opening a Quick User Datagram Protocol (UDP) Internet Connections (QUIC) socket on a computing platform, initializing QUIC packet processing of a hardware-based offloader, opening a QUIC connection to the offloader, and transmitting a first QUIC packet to the offloader over the QUIC connection. The hardware-based offloader encrypts and transmits the QUIC packet.

Abstract: Technologies for hairpinning network traffic include a compute device with a network interface controller (NIC) configured to receive, by a virtual Ethernet port aggregator (VEPA) agent of a media access control (MAC) of the NIC, a network packet from a virtual machine (VM). The VEPA agent is configured to transmit the received network packet to an agent deployed on an accelerator device of the NIC and the agent is configured to forward the received network packet to a virtual Ethernet bridge (VEB) hairpin agent of the accelerator device. The VEB hairpin agent is configured to determine whether a target destination of the network packet corresponds to another VM, return the received network packet to the agent deployed the accelerator device. The agent is further configured to forward the received network packet to the VEPA agent, which is further configured to transmit the received network packet to the other VM.

Abstract: Particular embodiments described herein provide for a system for enabling communication between a packet processing unit and a network interface controller (NIC) using an extension object, the system can include memory, one or more processors, and a processing unit extension object engine. The processing unit extension object engine can be configured to cause a packet to be received at the packet processing unit, where the packet processing unit is on a system on chip (SoC), add an extension object portion to the packet to create a modified packet, and cause the modified packet to be communicated to the NIC located on the same SoC. In an example, the extension object portion includes type data and partition data. The packet can be an Ethernet packet and the extension object portion can be added before a payload portion of the packet.