Patent ID: 8856518

Claim:
A network interface controller adapted for use as part of a computing device operating a virtualized computing environment comprising a parent partition and at least one virtual machine, the network interface controller comprising: a processor; and a memory having a data structure and program instructions stored thereon, the program instructions adapted for forwarding a received packet such that, upon execution by the processor, the program instructions cause the network interface controller to: decrypt address information associated with the packet using a first key, wherein the first key is part of a key pair with a second key accessible by the parent partition; determine, based at least in part on the address information, whether mapping information to forward the packet to a destination is present in the data structure; and at least one of: if the mapping information is present in the data structure, use the mapping information to send the packet to the destination; or if the mapping information is not present in the data structure, send the packet to the parent partition.