METHODS AND APPARATUS FOR USING A STATIC KEY OR A DYNAMIC KEY AND FOR REDUCING TCP FRAME TRANSMIT LATENCY

摘要

An alternate checksum option (410) for transmitting TCP frame data is used that does not require computing a TCP checksum. Instead, an integrity check value is computed (460, 480) and placed in the ESP authentication portion near the end of the frame. Transmission of a portion of the TCP frame data may begin (465) before all of the TCP frame data is received (470) by a TCP checksum offload device because the integrity check value is inserted at the end of the frame. Furthermore, the integrity check value is computed using a static key or a dynamic key may be computed to cover a greater portion of the frame compared with ESP authentication specified by the IPsec standard.