System and method of extending virtual address resolution for mapping networks

• US 7,890,633 B2
• Filed: 02/13/2003
• Issued: 02/15/2011
• Est. Priority Date: 02/13/2003
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Oracle America, Inc. (Oracle Corporation)
• Inventors: St. Pierre, Robert P., Caronni, Germano
• Primary Examiner(s): Chan; Wing F
• Assistant Examiner(s): Baturay; Alicia
• Application Number:
  US10/367,548
• Publication Number:
  US 20040162914A1
• Time in Patent Office: 2,924 Days
• Field of Search: 709/245, 709/227, 709/217
• US Class Current: 709/227
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function

Abstract

A method of associating a range of destination IP addresses with a real IP address for use with the Virtual Address Resolution Protocol is disclosed. The destination addresses may be a range of virtual IP addresses in a virtual network or a range of real IP addresses in a physical network. A record of the association of the range of destination addresses with a single real IP address is stored in a Virtual Address Resolution Protocol lookup table which is utilized when sending messages from a virtual IP address. The ability to assign a range of destination addresses to a single real IP address represents an extension of the use of VARP. The association of multiple destination addresses to a single real IP address allows an electronic device to function as a router to a widely distributed real or virtual network. The virtual network of the present invention adds a layer of encryption to the originating virtual network by sending encrypted data packets between the origin and destination addresses.

Claims

1. A method of routing data over a network, said network comprising a physical network and a virtual network, said method comprising the steps of:

associating a range of virtual IP addresses within said virtual network with a single real IP address, said range of virtual IP addresses including consecutive virtual IP addresses, said single real IP address identifying a physical component in the network;

storing a record of said range of virtual IP addresses and said association with the single real IP address in a network-accessible location; and

routing data sent from an originating virtual IP address on said network, said routing step comprising;

when said data is addressed to a destination address within said range of virtual IP addresses, resolving the destination address into said single real IP address using said association;

encapsulating said data and said virtual IP destination address within a packet addressed to said single real IP address;

sending said packet to the resolved single real IP address; and

sending said data to a default destination address upon failing to resolve said destination address into the single real IP address.

2. The method of claim 1, wherein said data is encrypted.

3. The method of claim 2, comprising the further step of:

decrypting said packet at said physical component referenced by said single real IP address to determine said virtual destination IP address; and

forwarding said packet to said virtual IP destination address.

4. The method of claim 1, comprising the further steps of:

identifying the range of virtual IP addresses by at least one of listing a starting IP address and an ending IP address in said range and identifying the range of virtual IP addresses using Classless InterDomain Routing (CIDR).

5. The method of claim 1, comprising the further step of:

associating at least one other range of virtual IP addresses configured into a different virtual network with a real IP address.

6. The method of claim 1, wherein said virtual network is located at least in part on an external physical network which also includes said physical component, said external physical network different from said network.

7. The method of claim 1, wherein said single real IP address identifies a physical component in the physical network separate from the virtual network.

8. A method of routing data over a network, said network comprising a first physical network and a second physical network, said first physical network having at least one electronic device supporting a virtual network, said second physical network having a plurality of electronic devices, said first physical network and said second physical network both being interfaced with a common electronic device, said virtual network having a lookup table to resolve a destination address into a real IP address of a component on said first physical network said method comprising:

associating a range of real IP addresses on said second physical network with a single real IP address of a component on said common electronic device;

storing said associations stored in said virtual lookup table; and

routing data from an originating virtual IP address in said virtual network to a destination address on said second physical network, said routing step comprising;

when said data is addressed to a destination address within said range of real IP addresses, resolving said destination address into the single real IP address of said component on said common electronic device;

encapsulating said data and said destination address within a packet addressed to said single real IP address;

sending said packet to said single real IP address;

forwarding said data to said destination address; and

sending said data to a default destination address upon failing to resolve said destination address into the single real IP address.

9. The method of claim 8, wherein said data is encrypted prior to sending, and comprising the further steps of:

decrypting said packet at said physical component referenced by said single real IP address to determine said destination address; and

forwarding said packet to said destination address.

10. In a network, a non-transitory computer readable medium holding computer-executable steps for a method, said method comprising the steps of:

associating a range of virtual IP addresses within a virtual network with a single real IP address, said single real IP address identifying a physical component in the network;

the range of virtual IP addresses including consecutive virtual IP addresses;

storing said association in a network-accessible location;

routing data addressed to a destination referenced by one of said range of virtual IP addresses from an originating virtual IP address, said routing step comprising;

when said data is addressed to a destination address within said range of virtual IP addresses, resolving the destination address into said single real IP address using said association;

encapsulating said data and said destination address within a packet addressed to said single real IP address;

sending said packet to said single real IP address; and

sending said data to a default destination address upon failing to resolve said destination address into the single real IP address.

11. The medium of claim 10, wherein said method comprises the further steps of:

encrypting said data and said destination address within the packet addressed to said single real IP address;

decrypting said data at said single real IP address; and

forwarding said data to said destination.

12. A method of routing data over a network, said network comprising a first physical network with at least one electronic device supporting a virtual network, said virtual network having access to a storage location holding associations used to resolve a destination address into a real IP address of a component on said first physical network, said first physical network being interfaced with a second physical network through an electronic device common to said first physical network and said second physical network, said second physical network having a plurality of electronic devices, each with a real IP address, said method comprising the steps of:

associating a range of real IP addresses on said second physical network with a single real IP address of a component on said common electronic device;

storing said association in said storage location; and

routing data from an originating virtual IP address in said virtual network to a destination address on said second physical network, said routing step comprising;

when said data is addressed to a destination address within said range of real IP addresses, resolving said destination address into the single real IP address of said component on said common electronic device using the association in said storage location;

encapsulating said data and said destination address within a packet addressed to said single real IP address;

sending said packet to the resolved single real IP address; and

sending said data to a default destination address upon failing to resolve said destination address into the single real IP address.

13. The method of claim 12, comprising the further steps of:

encrypting said data and said destination address in a packet sent to said single real IP address;

decrypting said packet at said single real IP address on said component on said common electronic device; and

forwarding said data to said destination address.

14. The method of claim 13, wherein said storage location is a Virtual Address Resolution Protocol lookup table.