  Cloud applications need network data encryption to isolate from other tenants
and protect their data from potential eavesdroppers in the network
infrastructure. This paper presents SDP, a protocol design for emerging
datacenter transport protocols, such as pHost, NDP, and Homa, to integrate data
encryption with the use of existing NIC offloading of cryptographic operations
designed for TLS over TCP. Therefore, SDP could enable a deployment path of new
transport protocols in datacenters without giving up hardware offloading
support, which would otherwise make encryption on those protocols even slower
than TLS over TCP. SDP is based on Homa, and outperforms TLS over TCP by up to
29 % in throughput. SDP currently supports two real-world applications, Redis,
improving throughput by up to 24 %, and in-kernel NVMe-oF, cutting P99 latency
by up to 21 %.
