Abstract: In general, the invention relates to a method for processing packets. The method includes receiving a first packet for a first target on a host. Prior to sending the packet to a Network Layer in the host, the method includes determining the first target of the first packet, obtaining a first target ID associated with the first target, obtaining a first virtual network stack (VNS) instance ID using the first target ID, and obtaining a first security configuration parameter using the first VNS instance ID. The method further includes sending the first packet to the Network Layer and processing the first packet in the Network Layer using the first security configuration parameter to obtain a first network processed packet.

Abstract: One embodiment of the present invention provides a system for sending data to a remote host using a socket. During operation the system receives a request from an application to write data to the socket, wherein the data is stored in a source memory buffer in user memory. Next, the system initiates a DMA (Direct Memory Access) transfer to transfer the data from the source memory buffer to a target memory buffer in a TCP (Transmission Control Protocol) Offload Engine. The system then returns control to the application without waiting for the TCP Offload Engine to send the data to the remote host.