Patent Document ID: 10129162
Application ID: 14716689
Patent Flag: 1

Claim One:
1. A machine-implemented method for a network, the method comprising: generating a network connection data structure by an adapter coupled to a server, for communicating with a storage device on behalf of one or more storage tenants using a network connection to the network via the adapter; wherein a record from among a plurality of records of the network connection data structure identifies the network connection by a connection identifier, and includes a network access address for a storage volume, a network access address for a virtual machine, a virtual network identifier (VNET) and a port identifier identifying an adapter port used for the network connection; generating by the adapter, a storage-to-network mapping data structure, the storage-to-network mapping data structure maps a storage tenant to the virtual network identifier stored at the network connection data structure, maps the virtual machine to the network access address of the virtual machine and the virtual network identifier, and maps the storage volume to the network access address of the storage volume, the virtual network identifier and the port identifier; receiving by the adapter, a flow data structure comprising a set of network connection processing rules for the storage tenant, the storage volume and the virtual machine, wherein the flow data structure is received when a new application or a new security feature is introduced to access the storage device via the network connection; combining by the adapter, the network connection data structure, the storage-to-network mapping data structure, and the flow data structure to generate a dataplane forwarding data structure, wherein the dataplane forwarding data structure provides a set of network packet processing rules that are used by a dataplane forwarder module of the adapter for processing a network packet; wherein the set of network processing rules are arranged by priority and define an action associated with each rule; and processing the network packet by the adapter, according to a rule from among the set of network processing rules of the dataplane forwarding data structure.