US 11,888,831 B2
Scalable IPSec services
Andree Toonk, Vancouver (CA); Grzegorz Boguslaw Duraj, Vancouver (CA); Alvin Sai Weng Wong, Delta (CA); and Kyle Mestery, Woodbury, MN (US)
Assigned to CISCO TECHNOLOGY, INC., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Oct. 21, 2021, as Appl. No. 17/507,312.
Application 17/507,312 is a continuation of application No. 16/401,304, filed on May 2, 2019, granted, now 11,196,726.
Claims priority of provisional application 62/812,545, filed on Mar. 1, 2019.
Prior Publication US 2022/0124075 A1, Apr. 21, 2022
Int. Cl. H04L 9/40 (2022.01); H04L 9/12 (2006.01); H04L 45/16 (2022.01); H04L 45/24 (2022.01)
CPC H04L 63/0485 (2013.01) [H04L 45/16 (2013.01); H04L 45/24 (2013.01); H04L 63/061 (2013.01); H04L 63/20 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
obtaining, at a first Encapsulating Security Payload node arranged at a first device, Encapsulating Security Payload traffic for an established Internet Protocol Security session, wherein the established Internet Protocol Security session is established with a second Encapsulating Security Payload node arranged at a second device;
determining, at the first Encapsulating Security Payload node, that the first Encapsulating Security Payload node does not contain session data associated with the established Internet Protocol Security session;
providing, from the first Encapsulating Security Payload node, a request for the session data associated with the established Internet Protocol Security session; and
obtaining, at the first Encapsulating Security Payload node from a data store arranged at a third device, the session data for the established Internet Protocol Security session to transfer the established Internet Protocol Security session from the second Encapsulating Security Payload node to the first Encapsulating Security Payload node,
wherein the Encapsulating Security Payload traffic is obtained at the first Encapsulating Security Payload node arranged at the first device in response to load balancing among a plurality of Encapsulating Security Payload nodes.