Routing messages between virtual networks

• US 10,225,188 B2
• Filed: 03/12/2018
• Issued: 03/05/2019
• Est. Priority Date: 01/08/2014
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Patel, Parveen
• Primary Examiner(s): Onamuti, Gbemileke J
• Application Number:
  US15/918,412
• Publication Number:
  US 20180212873A1
• Time in Patent Office: 358 Days
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 61/106 across networks, e.g. mapping telephone numbers to data network addresses
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]

Abstract

Routing messages between virtual networks using a mapping of virtual addresses from one virtual network to a virtual address of the other virtual network. Each virtual network has a valid set of virtual addresses, some of which being assigned to virtual nodes within the corresponding network. When a virtual network identifies a message to be sent, it identifies a destination for the message. Some destinations may be within the same virtual network and thus may be routed to virtual nodes within the virtual network. Other destinations may instead be mapped to a virtual address of another virtual network. In that case, routing information may also be obtained and the message may be dispatched to the virtual address of the other virtual network. This may be performed without the need for a gateway, which publishes a public address that is globally unique.

Claims

1. A computer system, comprising:

one or more processors; and

one or more computer readable storage media having stored thereon computer-executable instructions that are executable by the one or more processors to cause the computer system to route messages from a first virtual network to a second virtual network without the use of a gateway, the computer-executable instructions including instructions that are executable to cause the computer system to perform at least the following;

identify, for the first virtual network, a destination for a message;

access, for first virtual network, a record associated with the destination virtual network, the record identifying at least one virtual address assigned to at least one virtual node in the first virtual network and at least one virtual address assigned to at least one virtual node in the second virtual network, wherein the at least one virtual address assigned to the at least one virtual node in the second virtual network is reachable by the first virtual network without the use of the gateway;

determine, for the first virtual network and from the record, that the message destination is mapped to a virtual address associated with a virtual node of the second virtual network; and

route the message towards the virtual address of the second virtual network.

2. The computer system in accordance with claim 1, wherein the computer-executable instructions also include instructions that are executable to cause the computer system to:

identify the destination for the message based on identifying a uniform resource locator of the destination of the message; and

access the record associated with the destination virtual message based on accessing an entry for the uniform resource locator within a domain name server external to the first virtual network,

wherein the entry maps the uniform resource locator to the virtual address of the second virtual network.

3. The computer system in accordance with claim 1, wherein the record associated with the destination virtual network includes including at least two separate tables, the at least two separate tables including an internal address routing information table and an external address routing information table.

4. The computer system in accordance with claim 1, wherein, after routing the message towards the virtual address of the second virtual network, the second virtual network handles a reply to the message by sending the reply to the virtual address of the second virtual network.

5. The computer system in accordance with claim 3, wherein the reply is routed towards a virtual node in the first virtual network that transmitted the message.

6. The computer system in accordance with claim 1, wherein the virtual address of the second virtual network is assigned to a virtual node of the second virtual network.

7. The computer system in accordance with claim 1, wherein the virtual address of the second virtual network is an invalid virtual address for the first virtual network.

8. A method, implemented at a computer system that includes one or more processors, for routing messages from a first virtual network to a second virtual network without the use of a gateway, the method comprising:

identifying, for the first virtual network, a destination for a message;

accessing, for first virtual network, a record associated with the destination virtual network, the record identifying at least one virtual address assigned to at least one virtual node in the first virtual network and at least one virtual address assigned to at least one virtual node in the second virtual network, wherein the at least one virtual address assigned to the at least one virtual node in the second virtual network is reachable by the first virtual network without the use of the gateway;

determining, for the first virtual network and from the record, that the message destination is mapped to a virtual address associated with a virtual node of the second virtual network; and

routing the message towards the virtual address of the second virtual network.

9. The method in accordance with claim 8, further comprising:

identifying the destination for the message based on identifying a uniform resource locator of the destination of the message; and

accessing the record associated with the destination virtual message based on accessing an entry for the uniform resource locator within a domain name server external to the first virtual network,

wherein the entry maps the uniform resource locator to the virtual address of the second virtual network.

10. The method in accordance with claim 8, wherein the record associated with the destination virtual network includes including at least two separate tables, the at least two separate tables including an internal address routing information table and an external address routing information table.

11. The method in accordance with claim 8, wherein, after routing the message towards the virtual address of the second virtual network, the second virtual network handles a reply to the message by sending the reply to the virtual address of the second virtual network.

12. The method in accordance with claim 11, wherein the reply is routed towards a virtual node in the first virtual network that transmitted the message.

13. The method in accordance with claim 8, wherein the virtual address of the second virtual network is assigned to a virtual node of the second virtual network.

14. The method in accordance with claim 8, wherein the virtual address of the second virtual network is an invalid virtual address for the first virtual network.

15. A computer program product comprising one or more hardware storage devices having stored thereon computer-executable instructions that are executable by one or more processors to cause a computer system to route messages from a first virtual network to a second virtual network without the use of a gateway, the computer-executable instructions including instructions that are executable to cause the computer system to perform at least the following:

identify, for the first virtual network, a destination for a message;

access, for first virtual network, a record associated with the destination virtual network, the record identifying at least one virtual address assigned to at least one virtual node in the first virtual network and at least one virtual address assigned to at least one virtual node in the second virtual network, wherein the at least one virtual address assigned to the at least one virtual node in the second virtual network is reachable by the first virtual network without the use of the gateway;

determine, for the first virtual network and from the record, that the message destination is mapped to the virtual address associated with the at least one virtual node in the second virtual network; and

route the message towards the virtual address of the second virtual network.

16. The computer program product in accordance with claim 15, wherein the computer-executable instructions also include instructions that are executable to cause the computer system to:

identify the destination for the message based on identifying a uniform resource locator of the destination of the message; and

access the record associated with the destination virtual message based on accessing an entry for the uniform resource locator within a domain name server external to the first virtual network,

wherein the entry maps the uniform resource locator to the virtual address of the second virtual network.

17. The computer program product in accordance with claim 15, wherein the record associated with the destination virtual network includes including at least two separate tables, the at least two separate tables including an internal address routing information table and an external address routing information table.

18. The computer program product in accordance with claim 15, wherein, after routing the message towards the virtual address of the second virtual network, the second virtual network handles a reply to the message by sending the reply to the virtual address of the second virtual network.

19. The computer program product in accordance with claim 18, wherein the reply is routed towards a virtual node in the first virtual network that transmitted the message.

20. The computer program product in accordance with claim 15, wherein the virtual address of the second virtual network is assigned to a virtual node of the second virtual network.