1. A cord seal for use in a niche that houses an underwater light, the niche including a threaded hub, the underwater light connected to a power cord and a grounding wire, the cord seal comprising:
a main seal including a cord receiving passage for the power cord and a wire receiving passage for the grounding wire, the cord receiving passage including a split;
a seal support positioned adjacent to the main seal; and
a seal cap positioned adjacent to the seal support, the seal cap being threaded into the threaded hub and securing the main seal and the seal support entirely within the threaded hub, the seal cap deforming the main seal to provide a water-tight seal around the power cord and the grounding wire within the threaded hub.
2. The cord seal of claim 1 wherein the split spans from one side of the main seal to an opposite side of the main seal.
3. The cord seal of claim 1 wherein the split begins at an edge of the cord receiving passage and ends at an outer circumferential edge of the main seal.
4. The cord seal of claim 1 wherein the main seal is circular in shape.
5. The cord seal of claim 1 wherein the main seal is constructed of deformable rubber.
6. A niche assembly for use in a wall that houses an underwater light, the underwater light connected to a power cord and a grounding wire, the niche assembly comprising:
a niche adapted to be positioned in the wall, the niche including an interior, an exterior, and a threaded hub;
a main seal positioned entirely within the threaded hub,
the main seal including a cord receiving passage for the power cord and a wire receiving passage for the grounding wire,
the cord receiving passage including a split,
the power cord being routed from the exterior of the niche, through the main seal, and into the interior of the niche by spreading apart the split in the cord receiving passage;
a seal support positioned adjacent to the main seal; and
a seal cap positioned adjacent to the seal support, the seal cap securing the main seal and the seal support entirely within the threaded hub, the seal cap deforming the main seal to provide a water-tight seal around the power cord and the grounding wire within the threaded hub.
7. The cord seal of claim 6 wherein the split spans from one side of the main seal to an opposite side of the main seal.
8. The cord seal of claim 6 wherein the split begins at an edge of the cord receiving passage and ends at an outer circumferential edge of the main seal.
9. The cord seal of claim 6 wherein the main seal is circular in shape.
10. The cord seal of claim 6 wherein the main seal is constructed of deformable rubber.
11. A method of sealing a power cord extending through a niche that houses an underwater light, the method comprising:
spreading apart a main seal at a split;
inserting the power cord through the split into a cord receiving passage of the main seal;
inserting the main seal into a threaded hub of the niche;
positioning a seal support adjacent to the main seal;
positioning a seal cap adjacent to the seal support; and
rotating the seal cap into the threaded hub in order to secure the main seal and the seal support entirely within the threaded hub.
12. The method of claim 11 and further comprising tightening the seal cap within the threaded hub to deform the main seal in order to prevent water from flowing into the cord receiving passage.
13. The method of claim 11 and further comprising deforming the main seal in order to seal the split of the cord receiving passage around the power cord.
14. The method of claim 1 and further comprising inserting a grounding wire into a wire receiving passage of the main seal.
15. The method of claim 14 and further comprising pulling the grounding wire through the niche and connecting the grounding wire to a bonding lug inside the niche.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method of performing cryptographic operations on data packets in a Virtual Private Network (VPN) gateway having an Internet Key Exchange (IKE) process comprising:
receiving data packets from an external source;
routing the packets to a datapath having an IPSec component;
extracting a security parameter index from the packet;
searching a local cache in the IPSec component of the datapath for security associations for the data packet;
searching a security policy and security association cache for security associations for the data packet; and
performing cryptographic operations on the data packet using the security associations,
wherein the cryptographic operations are not performed in the IKE process.
2. A method as recited in claim 1 further comprising:
extracting the security parameter index from a header of the data packet.
3. A method as recited in claim 1 further comprising:
populating the security policy and security association cache in IKE with security association data negotiated by IKE during an IKE Phase 2 stage.
4. A method as recited in claim 1 further comprising:
updating the local cache with security association data when there is a miss in the local cache and a hit in the security policy and security association cache for security association data.
5. A method as recited in claim 1 further comprising:
determining whether a data packet is an IPSec data packet or a non-IPSec data packet.
6. A method as recited in claim 5 further comprising:
hashing the packet header to obtain a security parameter index if the packet is a non-IPSec data packet.
7. A method as recited in claim 1 further comprising routing the data packet to a datapath in the gateway.
8. A method as recited in claim 1 wherein said searching of a security policy and security association cache is performed if there is a miss in searching of the local cache in the IPSec component of the datapath.
9. A method as recited in claim 1 wherein a subsequent data packet received by the gateway having a second security parameter index that is the same as the security parameter index of the first received data packet obtains security association data from the local cache and that is the same as security association data for the first received data packet.