Network services platform
First Claim
1. A computer-implemented method of using a services platform to provide a network service to a remote enterprise network, comprising:
- using a computer to perform steps comprising;
providing a control module to an endpoint of the remote enterprise network;
establishing an Internet Protocol (IP) tunnel between the services platform and the endpoint responsive to execution of the control module on the endpoint;
establishing a bridge between the IP tunnel and the enterprise network responsive to the execution of the control module on the endpoint;
allocating a unique private IP address space to the enterprise network;
inventorying the enterprise network to identify a plurality of endpoints on the enterprise network, ones of the plurality of endpoints identified with enterprise network IP addresses in an enterprise address space;
assigning services platform IP addresses within the unique private IP address space to identified ones of the plurality of endpoints;
translating IP addresses in network traffic received by the services platform from the enterprise network via the IP tunnel from enterprise network IP addresses to corresponding services platform IP addresses;
translating IP addresses in network traffic destined from the services platform to the enterprise network via the IP tunnel from services platform IP addresses to corresponding IP enterprise network addresses; and
providing the network service to the enterprise network via the IP tunnel and bridge.
7 Assignments
0 Petitions
Accused Products
Abstract
A network services platform provides services to remote enterprise networks. The services platform provides a control module to a computer in the enterprise network. The control module executes on the computer and interacts with the services platform to establish an Internet Protocol (IP) tunnel between the services platform and the computer. The control module also establishes a bridge between the IP tunnel and the enterprise network. The services platform allocates a unique private IP address space to the enterprise network, and translates IP addresses in network communications between enterprise network addresses and corresponding services platform addresses in the allocated unique private address space. The services platform provides network services to the enterprise network via the IP tunnel and bridge.
21 Citations
17 Claims
-
1. A computer-implemented method of using a services platform to provide a network service to a remote enterprise network, comprising:
-
using a computer to perform steps comprising; providing a control module to an endpoint of the remote enterprise network; establishing an Internet Protocol (IP) tunnel between the services platform and the endpoint responsive to execution of the control module on the endpoint; establishing a bridge between the IP tunnel and the enterprise network responsive to the execution of the control module on the endpoint; allocating a unique private IP address space to the enterprise network; inventorying the enterprise network to identify a plurality of endpoints on the enterprise network, ones of the plurality of endpoints identified with enterprise network IP addresses in an enterprise address space; assigning services platform IP addresses within the unique private IP address space to identified ones of the plurality of endpoints; translating IP addresses in network traffic received by the services platform from the enterprise network via the IP tunnel from enterprise network IP addresses to corresponding services platform IP addresses; translating IP addresses in network traffic destined from the services platform to the enterprise network via the IP tunnel from services platform IP addresses to corresponding IP enterprise network addresses; and providing the network service to the enterprise network via the IP tunnel and bridge. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. A services platform for providing a network service to a remote enterprise network comprising:
-
a non-transitory computer-readable storage medium storing executable computer program modules; and a computer processor for executing the computer program modules for performing steps comprising; providing a control module to an endpoint of the remote enterprise network; establishing an Internet Protocol (IP) tunnel between the services platform and the endpoint responsive to execution of the control module on the endpoint; establishing a bridge between the IP tunnel and the enterprise network responsive to the execution of the control module on the endpoint; allocating a unique private IP address space to the enterprise network; inventorying the enterprise network to identify a plurality of endpoints on the enterprise network, ones of the plurality of endpoints identified with enterprise network IP addresses in an enterprise address space; assigning services platform IP addresses within the unique private IP address space to identified ones of the plurality of endpoints; translating IP addresses in network traffic received by the services platform from the enterprise network via the IP tunnel from enterprise network IP addresses to corresponding services platform IP addresses; translating IP addresses in network traffic destined from the services platform to the enterprise network via the IP tunnel from services platform IP addresses to corresponding IP enterprise network addresses; and providing the network service to the enterprise network via the IP tunnel and bridge. - View Dependent Claims (8, 9, 10, 11, 12)
-
-
13. A non-transitory computer-readable storage medium storing executable computer program modules for enabling a services platform to provide a network service to a remote enterprise network, the modules executable to perform steps comprising:
-
providing a control module to an endpoint of the remote enterprise network; establishing an Internet Protocol (IP) tunnel between the services platform and the endpoint responsive to execution of the control module on the endpoint; establishing a bridge between the IP tunnel and the enterprise network responsive to the execution of the control module on the endpoint; allocating a unique private IP address space to the enterprise network; inventorying the enterprise network to identify a plurality of endpoints on the enterprise network, ones of the plurality of endpoints identified with enterprise network IP addresses in an enterprise address space; assigning services platform IP addresses within the unique private IP address space to identified ones of the plurality of endpoints; translating IP addresses in network traffic received by the services platform from the enterprise network via the IP tunnel from enterprise network IP addresses to corresponding services platform IP addresses; translating IP addresses in network traffic destined from the services platform to the enterprise network via the IP tunnel from services platform IP addresses to corresponding IP enterprise network addresses; and providing the network service to the enterprise network via the IP tunnel and bridge. - View Dependent Claims (14, 15, 16, 17)
-
Specification