Multi-tunneling virtual network adapter

• US 10,389,686 B2
• Filed: 02/22/2018
• Issued: 08/20/2019
• Est. Priority Date: 10/06/2014
• Status: Active Grant

• Current Assignee: Cryptzone North America Inc. (Cryptzone Group AB)
• Original Assignee: Cryptzone North America Inc. (Cryptzone Group AB)
• Inventors: Glazemakers, Kurt, Allansson, Per Johan
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US15/902,912
• Publication Number:
  US 20180183763A1
• Time in Patent Office: 544 Days
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 69/14 Multichannel or multilink protocols
• CPC Class Codes: H04L 69/30 Definitions, standards or architectural aspects of layered protocol stacks

Abstract

Multiple virtual private network connections to be created without the need for administrative privileges, and network traffic to be routed using a single virtual adapter instead of a dedicated virtual adapter for each virtual network connection.

Claims

1. A computer-implemented method comprising:

receiving, from a virtual adapter operating in a kernel space portion of an operating system running on a computer system, a data packet by a routing component of a virtual private network (VPN) client, the routing component comprising a first routing table, and the VPN client residing in a user space portion of the operating system, wherein a second routing table of the operating system directs network traffic for virtual private networks to the virtual adapter;

identifying, by the routing component using the first routing table, a destination for the data packet;

creating, by the VPN client, a connection to a gateway corresponding to the destination for the data packet; and

transmitting the data packet to the destination via the gateway.

2. The method of claim 1, wherein identifying the destination for the data packet includes identifying the gateway corresponding to the destination for the data packet.

3. The method of claim 1, wherein creating the connection to the gateway includes creating a transmission control protocol connection.

4. The method of claim 1, wherein creating the connection to the gateway includes creating a user datagram protocol connection.

5. The method of claim 1, further comprising removing the gateway connection.

6. The method of claim 1, further comprising:

receiving, by the routing component, a plurality of data packets;

identifying a respective destination for each respective data packet from the plurality of data packets;

creating a respective connection to a gateway corresponding to a respective destination for each respective data packet in the plurality of data packets; and

transmitting each respective data packet to a destination of the respective packet via the respective gateway connection.

7. The method of claim 6, further comprising removing one or more of the plurality of gateway connections.

8. The method of claim 6, wherein the plurality of data packets are each routed through the virtual adapter.

9. A non-transitory, computer-readable medium storing instructions that, when executed, cause a computer system to:

receive, from a virtual adapter operating in a kernel space portion of an operating system running on the computer system, a data packet by a routing component of a virtual private network (VPN) client, the routing component comprising a first routing table, and the VPN client residing in a user space portion of the operating system, wherein a second routing table of the operating system directs network traffic for virtual private networks to the virtual adapter;

identify, by the routing component using the first routing table, a destination for the data packet;

create, by the VPN client, a connection to a gateway corresponding to the destination for the data packet; and

transmit the data packet to the destination via the gateway.

10. A computer system comprising:

a processor; and

non-transitory memory in communication with the processor and storing instructions that, when executed by the processor, cause the computer system to;

receive, from a virtual adapter operating in a kernel space portion of an operating system running on the computer system, a data packet by a routing component of a virtual private network (VPN) client, the routing component comprising a first routing table, and the VPN client residing in a user space portion of the operating system, wherein a second routing table of the operating system directs network traffic for virtual private networks to the virtual adapter;

identify, by the routing component using the first routing table, a destination for the data packet;

create, by the VPN client, a connection to a gateway corresponding to the destination for the data packet; and

transmit the data packet to the destination via the gateway.