Patent ID: 11902264
Assignee: VMWARE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 15:
16. A computer system, comprising:
a memory; and
a processor coupled to the memory, the processor being configured to:
select, at a source endpoint, a first source port, of a plurality of source ports, associated with a first path of a plurality of paths for sending an encrypted packet from the source endpoint to a destination endpoint, wherein each source port of the plurality of source ports is associated with a different path of the plurality of paths for sending the encrypted packet from the source endpoint to the destination endpoint, and wherein the encrypted packet is encrypted based on a security association (SA) established between the source endpoint and the destination endpoint in accordance with an Internet Protocol (IP) Security (IPSec) protocol;
determine, at the source endpoint, network address translation traversal (NAT-T) is enabled for the SA;
based on the determining that NAT-T is enabled for the SA, encapsulating, at the source endpoint, the encrypted packet with a user datagram protocol (UDP) header having the first source port associated with the first path; and
transmit the encapsulated encrypted packet from the source endpoint to the destination endpoint via the first path.