Automatically configuring virtual private networks

• US 8,356,087 B1
• Filed: 08/24/2010
• Issued: 01/15/2013
• Est. Priority Date: 08/24/2010
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Miller, Kevin C., Nagargadde, Aparna
• Primary Examiner(s): BILGRAMI, ASGHAR H
• Application Number:
  US12/862,412
• Time in Patent Office: 875 Days
• Field of Search: 709/220, 709/223
• US Class Current: 709/220
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 63/0272 Virtual private networks

Abstract

Disclosed are various embodiments for configuring virtual private networks (VPNs). A request is made, through a service call, for creation of a VPN through a client VPN gateway and a server VPN gateway. In response to the service call, a generic gateway configuration document is received. The generic gateway configuration document is applicable to the client VPN gateway. The generic gateway configuration document is translated to a device-specific gateway configuration document.

Claims

1. A method comprising the steps of:

requesting, through a first service call, creation of a data structure describing a server virtual private network (VPN) gateway;

receiving, in response to the first service call, a handle for the server VPN gateway;

requesting, through a second service call, creation of a data structure describing a client VPN gateway;

receiving, in response to the second service call, a handle for the client VPN gateway;

requesting, through a third service call, creation of a VPN that includes the client VPN gateway and the server VPN gateway;

receiving, in response to the third service call, a generic gateway configuration document;

translating the generic gateway configuration document to a device-specific gateway configuration document; and

applying the device-specific gateway configuration document to the client VPN gateway.

2. The method of claim 1, wherein the generic gateway document is an Extensible Markup Language (XML) document.

3. The method of claim 2, wherein the translating applies an XML stylesheet to the generic gateway document to produce the device-specific gateway configuration document.

4. The method of claim 2, wherein the applying uses a command line interface to the client VPN gateway.

5. A system, comprising:

at least one computing device; and

a virtual private network (VPN) configuration manager executable in the at least one computing device, the VPN configuration manager comprising;

logic that receives a service call requesting creation of a VPN which uses a client VPN gateway and a server VPN gateway, wherein the service call includes a description of the client VPN gateway; and

logic that sends, in response to the service call, a generic configuration document, wherein contents of the generic configuration document are based at least on the description of the client VPN gateway.

6. The system of claim 5, further comprising logic that creates the generic configuration document based at least on the description of the client VPN gateway.

7. The system of claim 5, further comprising:

logic that, in response to the service call, determines at least one configuration parameter and a corresponding value based at least on the description of the client VPN gateway; and

logic that creates the generic configuration document based at least on the determined at least one configuration parameter and the corresponding value.

8. The system of claim 5, further comprising logic that retrieves information about the server VPN gateway from a data store, wherein the contents of the generic configuration document are further based on the retrieved information.

9. The system of claim 5, further comprising logic that, in response to the service call, configures the server VPN gateway based at least on the description of the client VPN gateway.

10. The system of claim 5, further comprising:

logic that, in response to the service call, communicates at least one configuration parameter and corresponding value to the server VPN gateway, the at least one configuration parameter and the corresponding value based at least on the description of the client VPN gateway.

11. The system of claim 5, further comprising logic that creates the generic configuration document based at least on the description of the client VPN gateway.

12. The system of claim 5, further comprising logic that validates parameters of the service call.

13. A method, comprising the steps of:

requesting, through a service call, creation of a virtual private network (VPN) through a VPN client gateway and a VPN server gateway;

receiving, in response to the service call, a generic gateway configuration document applicable to the VPN client gateway; and

translating the generic gateway configuration document to a device-specific gateway configuration document.

14. The method of claim 13, further comprising the step of applying the device-specific gateway configuration document to the client VPN gateway.

15. The method of claim 13, further comprising the step of applying the device-specific gateway configuration document to the client VPN gateway through a command line interface to the client VPN gateway.

16. The method of claim 13, further comprising the step of applying the device-specific gateway configuration document to the client VPN gateway by invoking a program executing on the client VPN gateway.

17. The method of claim 13, wherein the translating comprises applying a device-specific translation table to the generic gateway configuration document.

18. The method of claim 17, further comprising the step of receiving the device-specific translation table.

19. The method of claim 17, further comprising the step of receiving the device-specific translation table in response to the service call.

20. The method of claim 13, wherein the generic gateway document is an Extensible Markup Language (XML) document.

21. The method of claim 13, wherein the translating applies a device-specific translation table to the generic gateway configuration document to produce the device-specific gateway configuration document.