Patent ID: 7633864

Claim:
A method for routing a packet, comprising: receiving the packet from a first network into a network interface card (NIC), wherein the NIC is operatively connected to a host and wherein the host comprises a global container comprising a first virtual network stack and a second virtual network stack, wherein the first virtual network stack and the second virtual network stack share a common kernel and execute within a common operating system; sending the packet to the first virtual network stack, wherein the first virtual network stack comprises a first filter, a first network layer, and a first transport layer, wherein the first filter, the first network layer, and the first transport layer are isolated from the second virtual network stack; if the packet is permitted through the first filter in the first virtual network stack: sending the packet to a first virtual NIC, wherein the first virtual NIC is within the global container, shares the common kernel, and executes within the common operating system; and if the packet is not permitted through the first filter: dropping the packet.