Patent ID: 9276875
Filing Date: 2016-03-01
CPC Classification: G06F,H04L

Claim Text:
1. A network interface apparatus in a computer system, comprising: a first virtual function of a plurality of virtual functions, the first virtual function owned by a first virtual machine present in the computer system; a first simple filtering agent, associated with the first virtual function, to enforce one or more inbound simple filter rules at a first filtering level for a first network packet of a plurality of network packets received from a network, wherein at least one of the one or more inbound simple filter rules blocks the first network packet from reaching the first virtual machine in response to the first network packet failing at least one of the one or more inbound simple filter rules; a second virtual function of the plurality of virtual functions, the second virtual function owned by a virtual machine monitor present in the computer system; and a side bounce filtering agent to forward the first network packet to the second virtual function in response to first network packet being blocked by the at least one of the one or more inbound simple filter rules.