Abstract: This disclosure provides systems and methods for processing packets. A system can include first computing device, a second computing device, and a first packet forwarding device. Each of the first computing device and the second computing device can be communicatively coupled to a respective port of the first packet forwarding device. Each port of the first packet forwarding device can be assigned a unique MAC address. For a first packet received from the first computing device, the first packet forwarding device can be configured to determine that a destination MAC address of the first packet matches the MAC address assigned to the port on which the first packet was received, and to forward the first packet to the second computing device, responsive to the determination. For a second packet received from the second computing device, the first packet forwarding device can be configured to forward the second packet via the port whose MAC address matches a source MAC address of the second packet.

Abstract: This disclosure provides systems and methods for processing packets. A system can include first computing device, a second computing device, and a first packet forwarding device. Each of the first computing device and the second computing device can be communicatively coupled to a respective port of the first packet forwarding device. Each port of the first packet forwarding device can be assigned a unique MAC address. For a first packet received from the first computing device, the first packet forwarding device can be configured to determine that a destination MAC address of the first packet matches the MAC address assigned to the port on which the first packet was received, and to forward the first packet to the second computing device, responsive to the determination. For a second packet received from the second computing device, the first packet forwarding device can be configured to forward the second packet via the port whose MAC address matches a source MAC address of the second packet.

Abstract: This disclosure provides systems and methods for processing packets. A system can include first computing device, a second computing device, and a first packet forwarding device. Each of the first computing device and the second computing device can be communicatively coupled to a respective port of the first packet forwarding device. Each port of the first packet forwarding device can be assigned a unique MAC address. For a first packet received from the first computing device, the first packet forwarding device can be configured to determine that a destination MAC address of the first packet matches the MAC address assigned to the port on which the first packet was received, and to forward the first packet to the second computing device, responsive to the determination. For a second packet received from the second computing device, the first packet forwarding device can be configured to forward the second packet via the port whose MAC address matches a source MAC address of the second packet.

Abstract: The methods and systems described herein provide a mechanism to externalize network functions through a direct link between a network switch and an external packet processor. The network switch is configured to receive a packet directed to a destination node via a first network interface. The network switch is also configured to forward the received packet to a packet processor, via a second network interface, over a direct physical link between the network switch and the packet processor. The packet is forwarded with an identifier for a virtualized network function executing on the packet processor and a destination MAC address of the packet is different from a MAC address of the packet processor.

Abstract: The methods and systems described herein provide a mechanism to externalize network functions through a direct link between a network switch and an external packet processor. The network switch is configured to receive a packet directed to a destination node via a first network interface. The network switch is also configured to forward the received packet to a packet processor, via a second network interface, over a direct physical link between the network switch and the packet processor. The packet is forwarded with an identifier for a virtualized network function executing on the packet processor and a destination MAC address of the packet is different from a MAC address of the packet processor.

Abstract: This disclosure provides systems and methods for processing packets. A system can include first computing device, a second computing device, and a first packet forwarding device. Each of the first computing device and the second computing device can be communicatively coupled to a respective port of the first packet forwarding device. Each port of the first packet forwarding device can be assigned a unique MAC address. For a first packet received from the first computing device, the first packet forwarding device can be configured to determine that a destination MAC address of the first packet matches the MAC address assigned to the port on which the first packet was received, and to forward the first packet to the second computing device, responsive to the determination. For a second packet received from the second computing device, the first packet forwarding device can be configured to forward the second packet via the port whose MAC address matches a source MAC address of the second packet.

Abstract: The methods and systems described herein provide a mechanism to externalize network functions through a direct link between a network switch and an external packet processor. The network switch is configured to receive a packet directed to a destination node via a first network interface. The network switch is also configured to forward the received packet to a packet processor, via a second network interface, over a direct physical link between the network switch and the packet processor. The packet is forwarded with an identifier for a virtualized network function executing on the packet processor and a destination MAC address of the packet is different from a MAC address of the packet processor.

Abstract: The methods and systems described herein provide a mechanism to externalize network functions through a direct link between a network switch and an external packet processor. The network switch is configured to receive a packet directed to a destination node via a first network interface. The network switch is also configured to forward the received packet to a packet processor, via a second network interface, over a direct physical link between the network switch and the packet processor. The packet is forwarded with an identifier for a virtualized network function executing on the packet processor and a destination MAC address of the packet is different from a MAC address of the packet processor.

Abstract: A method of controlling the sharing of data between entities that are in electronic communication with each other may include generating an authentication credential comprising an identifier for the target service and a unique signature, attenuating the authentication credential, and determining whether a client device is authorized to access the target service, and, only if so, providing the authentication credential to the client device. In an embodiment, the method may include receiving an access request from the client device, identifying that the authentication credential includes the unique signature and a third party caveat that is associated with a third party authentication service, in response to the identifying, determining whether the request also comprises a discharge credential for the third party caveat, and if the request includes the discharge credential, providing the client device with the requested service, otherwise denying the request.