METHOD AND SYSTEM OF A CLOUD-BASED MULTIPATH ROUTING PROTOCOL

• US 20170237710A1
• Filed: 10/13/2016
• Published: 08/17/2017
• Est. Priority Date: 04/13/2015
• Status: Active Grant

• Current Assignee: Nicira Incorporated (Broadcom, Inc.)
• Original Assignee: Ajit Ramachandra Mayya, Parag Pritam Thakore, Stephen Craig Connors, Thomas Harold Speeter
• Inventors: MAYYA, AJIT RAMACHANDRA, CONNORS, STEPHEN CRAIG, KOMPEL, ALEX, SPEETER, THOMAS HAROLD, THAKORE, PARAG PRITAM
• Granted Patent: US 10,425,382 B2
• Time in Patent Office: Days
• CPC Class Codes: G06N 20/00 Machine learning
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 45/24 Multipath
• CPC Class Codes: H04L 45/302 Route determination based on requested QoS
• CPC Class Codes: H04L 45/42 Centralised routing
• CPC Class Codes: H04L 45/64 using an overlay routing layer
• CPC Class Codes: H04L 47/125 by balancing the load, e.g. traffic engineering
• CPC Class Codes: H04L 49/35 Switches specially adapted for specific applications
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

In one aspect, a computerized system useful for implementing a cloud-based multipath routing protocol to an Internet endpoint includes an edge device that provides an entry point into an entity'"'"'s core network. The entity'"'"'s core network includes a set of resources to be reliably accessed. The computerized system includes a cloud-edge device instantiated in a public-cloud computing platform. The cloud-edge device joins a same virtual routing and forwarding table as the edge device. The cloud-edge device receives a set of sources and destinations of network traffic that are permitted to access the edge device and the set of resources.

Claims

1. A computerized system useful for implementing a cloud-based multipath routing protocol to an Internet endpoint comprising:

an edge device that provides an entry point into an entity'"'"'s core network, and wherein the entity'"'"'s core network comprises a set of resources to be reliably accessed; and

another cloud-edge device instantiated in a public-cloud computing platform, wherein the cloud-edge device joins a same virtual routing and forwarding table as the edge device, wherein the cloud-edge device receives a set of sources and destinations of network traffic that are permitted to access the edge device and the set of resources.

2. The computerized system of claim 1, wherein the entity'"'"'s core network comprises an enterprise'"'"'s core network or a service-provider'"'"'s core network.

3. The computerized system of claim 1, wherein the edge device comprises a virtual machine located in a local computing system located a branch office or a customer premises.

4. The computerized system of claim 1, wherein the set of resources to be reliably accessed comprises a server system to be accessed by a client device via the cloud-edge device and the edge device.

5. The computerized system of claim 4, wherein a rule is implemented that allows a public Internet protocol (IP) address of the client device to reach the server system via another public IP address assigned to the cloud-edge device.

6. The computerized system of claim 5, wherein the other public IP address assigned to the cloud-edge device is assigned to a local-area network (LAN) side of the edge device.

7. The computerized system of claim 5, wherein a client-side device connects to the server system accessing other public IP address assigned to the cloud-edge device and does not connect to the server system by directly accessing an IP address of the server system, and wherein the client-side device securely connects to the server system over a virtual private network (VPN) to the server via the cloud-edge device.

8. The computerized system of claim 5, wherein the cloud-edge device is implemented in a public cloud service provider platform.

9. The computerized system of claim 1, wherein the cloud-edge device is set to deny any inbound network traffic by default.

10. A computerized method useful for implementing a cloud-based multipath routing protocol to an Internet endpoint comprising:

providing, with an edge device, an entry point into an entity'"'"'s core network, and wherein the entity'"'"'s core network comprises a set of resources to be reliably accessed; and

instantiating a cloud-edge device in a public-cloud computing platform, wherein the cloud-edge device joins a same virtual routing and forwarding table as the edge device, wherein the cloud-edge device receives a set of sources and destinations of network traffic that are permitted to access the edge device and the set of resources.

11. The computerized method of claim 10, wherein the entity'"'"'s core network comprises an enterprise'"'"'s core network or a service-provider'"'"'s core network.

12. The computerized method of claim 10, wherein the edge device comprises a virtual machine located in a local computing system located a branch office or a customer premises.

13. The computerized method of claim 10, wherein the set of resources that are reliably accessed comprises a server system to be accessed by a client device via the cloud-edge device and the edge device.

14. The computerized method of claim 13,

wherein the set of resources are reliably accessed by a client device via a first link and a second link of a multilink bundle such that if the first link or the second link fails, the remaining link continues to provide the set of resources.

15. The computerized method of claim 14, wherein a rule is implemented that allows a public Internet protocol (IP) address of the client device to reach the server system via another public IP address assigned to the cloud-edge device.

16. The computerized method of claim 15, wherein the other public IP address assigned to the cloud-edge device is assigned to a local-area network (LAN) side of the edge device.

17. The computerized method of claim 16, wherein a client-side device connects to the server system accessing other public IP address assigned to the cloud-edge device and does not connect to the server system by directly accessing an IP address of the server system, and wherein the client-side device securely connects to the server system over a virtual private network (VPN) to the server via the cloud-edge device.

18. The computerized method of claim 17, wherein the cloud-edge device is implemented in a public cloud service provider platform.

19. The computerized method of claim 10, wherein the cloud-edge device is set to deny any inbound network traffic by default.