Patent ID: 8079077

Claim:
A method for providing a security gateway, comprising: (a) establishing by the security gateway a host side session between the security gateway and a host, the security gateway comprising a multi-core processor comprising a plurality of central processing unit (CPU) cores; (b) selecting by the security gateway a proxy network address for a host based on a combination of network addresses for the host side session to result in a calculated first CPU core identity of a first CPU core of the multi-core processor being the same as a calculated second CPU core identity of a second CPU core of the multi-core processor; (c) using the proxy network address to establish by the security gateway a server side session between the security gateway and the server; (d) in response to receiving a first data packet from the host side session, calculating by the security gateway the first CPU core identity and assigning the first CPU core with the first CPU core identity to process data packets received from the host side session according to security policies; (e) in response to receiving a second data packet from the server side session, calculating by the security gateway the second CPU core identity from a server network address and the proxy network address in the second data packet; (f) assigning the second CPU core with the second CPU core identity to process data packets received from the server side session according to the security policies; (g) processing the second data packet according to the security policies by the second CPU core; (h) substituting the proxy network address in the processed second data packet with the host network address by the security gateway; and (i) sending the processed second data packet to the host side session.