Patent ID: 7684414

Claim:
A system for allowing a red-side of an IP-layer encryptor to utilize the benefits of a performance enhancing proxy located on a black-side of the IP-layer encryptor, comprising: an IP-layer encryptor, wherein the IP-layer encryptor transforms IP packets between a red-side and a black-side, wherein IP packets received from the red-side are encrypted and output to the black-side, and wherein IP packets received from the black-side are decrypted and output to the red-side; a first enabler disposed on the red-side of the IP-layer encryptor; and a second enabler disposed on the black-side of the IP-layer encryptor; wherein the first enabler receives a first packet of a first higher-level protocol, creates a second packet of an encapsulation protocol, encapsulates higher-level protocol connection information and payload from the first packet into the second packet, outputs the second packet, and notifies the second enabler that the second packet contains encapsulated first higher-level protocol data; wherein the IP-layer encryptor receives the second packet from the red-side, encrypts the payload from the second packet into a first IP packet, stores the higher-level protocol connection information from the second packet into the first IP packet, and outputs the first IP packet to the black-side; and wherein the second enabler receives the first IP packet, encapsulates the first IP packet in a third packet of a second higher-level protocol responsive to the notification from the first enabler, and sets higher-level protocol connection information of the third packet based on the higher-level protocol connection information from the second packet stored in the first IP packet.