Method and apparatus for optimizing and prioritizing the creation of a large number of VPN tunnels

• US 7,921,215 B2
• Filed: 01/12/2009
• Issued: 04/05/2011
• Est. Priority Date: 01/12/2009
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Dessart, Francois
• Primary Examiner(s): SHIN, KYUNG H
• Application Number:
  US12/319,885
• Publication Number:
  US 20100180037A1
• Time in Patent Office: 813 Days
• Field of Search: 709/227, 709/224, 709/230
• US Class Current: 709/227
• CPC Class Codes: H04L 63/0272 Virtual private networks

Abstract

There is provided a communications network including a server forming part of a virtual private network, a plurality of client computers operative to request connection to the server and to be connected to the server when a request for connection is granted, thereby to be added to the virtual private network and a server response module, operative, in response to a connection request from at least one of the plurality of client computers which connection request cannot be processed by the server, to provide to the at least one of said plurality of client computers a server response indicating that the connection request should be retransmitted only after at least one criterion is met.

Claims

1. A communications network comprising:

a server forming part of a virtual private network;

a plurality of client computers operative to request connection to said server and to be connected to said server when a request for connection is granted, thereby to be added to said virtual private network, wherein at least one of said plurality of client computers is a prioritized client computer having an order of priority; and

a server response module, operative, in response to a connection request from at least one of said plurality of client computers which connection request cannot be processed by said server, to provide to said at least one of said plurality of client computers;

a delay notification indicating that said connection request should be retransmitted by said at least one of said plurality of client computers after a specified time duration is allowed to pass, wherein said specified time duration depends on said order of priority.

2. A communications network according to claim 1 and wherein said server includes:

reserved prioritized client connection resources; and

a prioritized client identification module operative, upon receipt of a connection request from said prioritized client computer, to identify said connection request as a prioritized connection request and to employ said reserved prioritized client connection resources to connect said prioritized client computer to said server thereby to add said prioritized client computer to said virtual private network.

3. A communications network according to claim 1 and wherein said specified time duration is based on at least one of resources available to said server, a number of connection requests currently being processed by said server, a number of connection requests seen by said server and a number of expected connection requests.

4. Apparatus for use in a communications network interconnecting a plurality of client computers, wherein at least one of the plurality of client computers is a prioritized client computer having an order of priority, the apparatus comprising a server which includes:

a server response module, operative, in response to a connection request from at least one said client computer which connection request cannot be processed by said server, to provide to said at least one client computer a delay notification indicating that said connection request should be retransmitted by said at least one of said plurality of client computers after a specified time duration is allowed to pass, wherein said specified time duration depends on said order of priority.

5. Apparatus according to claim 4 and also comprising a prioritized client identification module operative, upon receipt of a connection request from said prioritized client computer, to identify said connection request as a prioritized connection request, and to employ reserved prioritized client connection resources to connect said prioritized client computer to said server, thereby to add said prioritized client computer to a virtual private network including said server.

6. Apparatus according to claim 4 and wherein said specified time duration is based on at least one of resources available to said server, a number of connection requests currently being processed by said server, a number of connection requests seen by said server and a number of expected connection requests.

7. Apparatus for use in a communications network comprising a server and a plurality of client computers operative to request connection to said server and to be connected to said server when a request for connection is granted and thereby to create a virtual private network, wherein at least one of the plurality of client computers is a prioritized client computer having an order of priority, the apparatus comprising:

means for providing to at least one of said plurality of client computers, in response to a connection request from said at least one of said plurality of client computers which connection request cannot be processed by said server, a delay notification indicating that said connection request should be retransmitted by said at least one of said plurality of client computers after a specified time duration is allowed to pass, wherein said specified time duration depends on said order of priority.

8. Apparatus according to claim 7 and wherein said server includes reserved prioritized client connection resources, the apparatus also including:

means for identifying a connection request received from said prioritized client computer as a prioritized connection request and for employing said reserved prioritized client connection resources to connect said prioritized client computer to said server thereby to add said prioritized client computer to said virtual private network.

9. Apparatus according to claim 7 and wherein said specified time duration is based on at least one of resources available to said server, a number of connection requests currently being processed by said server, a number of connection requests seen by said server and a number of expected connection requests.

10. A method for connecting multiple client computers to a server thereby to create a virtual private network, the method comprising:

providing a server forming part of said virtual private network;

sending a plurality of connection requests from a plurality of client computers to said server, wherein at least one of said plurality of client computers is a prioritized client computer having an order of priority; and

in response to server failure in processing at least one of said plurality of connection requests received from at least one of said client computers, sending from said server to said at least one of said plurality of client computers a delay notification indicating that said connection request should be retransmitted by said at least one of said client computers after a specified time duration is allowed to pass, wherein said specified time duration depends on said order of priority.

11. A method according to claim 10 and wherein said sending comprises sending a prioritized connection request from said prioritized client computer, the method also comprising:

providing reserved prioritized client connection resources on said server; and

in response to receipt of said prioritized connection request, identifying said connection request as a prioritized connection request; and

employing said reserved prioritized client connection resources to connect said prioritized client computer to said server thereby to add said prioritized client computer to said virtual private network.

12. A method for use in a communications network interconnecting a plurality of client computers and at least one server, wherein at least one of said plurality of client computers is a prioritized client computer having an order of priority, the method comprising:

providing to at least one said client computer, in response to a connection request from said at least one client computer which connection request cannot be processed by said server, a delay notification indicating that said connection request should be retransmitted by said at least one of said plurality of client computers after a specified time duration is allowed to pass, wherein said specified time duration depends on said order of priority.

13. A method according to claim 12 and also comprising:

identifying a connection request received from said prioritized client computer as a prioritized connection request; and

employing reserved prioritized client connection resources to connect said prioritized client computer to said server, thereby to add said prioritized client computer to a virtual private network including said server.

14. A computer software product for use in a communications network comprising a server and a plurality of client computers, wherein at least one of said plurality of client computers is a prioritized client computer having an order of priority and is operative to request connection to said server and to be connected to said server when a request for connection is granted thereby to create a virtual private network, the computer software product comprising a non-transitory computer-readable medium in which program instructions are stored, which instructions, when read by a computer, cause the computer to provide to at least one of said plurality of client computers, in response to a connection request from said at least one of said plurality of client computers which connection request cannot be processed by said server, a delay notification indicating that said connection request should be retransmitted by said at least one of said plurality of client computers after a specified time duration is allowed to pass, wherein said specified time duration depends on said order of priority.