Nutanix, Inc.
Efficient management of secure name lookup query messages

Abstract:

One embodiment of the present invention provides a system. During operation, the system determines a first set of ciphers supported by a name server based on a name lookup response message. The system then inserts an entry associated with the name server in a data structure stored in a local storage device. Subsequently, the system identifies a second set of ciphers supported by a local name server in a name lookup query message destined to the name server. The system then selects the name lookup query message for an update operation based on the entry in the data structure. The update operation includes removing ciphers from the name lookup query message except a common cipher, which is present in both the first and second sets of ciphers. The system determines an egress port corresponding to the name server for the updated name lookup query message.