Patent ID: 8774213

Claim:
A framework for processing data packets in a multi-tenant environment, the framework comprising: at least one processor; and memory including instructions that, when executed by the at least one processor, cause the at least one processor to: communicate with one or more distributed services to load into the memory one or more per-tenant network specifications; instruct at least one offload device to execute the loaded one or more per-tenant network specifications to apply a set of rules for processing the data packets; manage the set of rules for the at least one offload device when the at least one offload device is unable to concurrently store all of the set of rules by loading a first subset of the set of rules into the at least one offload device while processing a second subset of the set of rules; and deliver the data packets to an appropriate destination for each of a plurality of traffic types after the at least one offload device has attempted to match the set of rules to the data packets.