Inter-autonomous networking involving multiple service providers

• US 9,015,471 B2
• Filed: 09/10/2013
• Issued: 04/21/2015
• Est. Priority Date: 07/10/2000
• Status: Expired due to Fees

• Current Assignee: AlterWAN, Inc.
• Original Assignee: AlterWAN, Inc.
• Inventors: Haney, Richard D.
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US14/022,838
• Publication Number:
  US 20140071829A1
• Time in Patent Office: 588 Days
• Field of Search: None
• US Class Current: 713/153
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/12 Shortest path evaluation
• CPC Class Codes: H04L 45/20 Hop count for routing purposes, e.g. TTL
• CPC Class Codes: H04L 45/308 Route determination based on user's profile, e.g. premium users
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 47/12 Avoiding congestion; Recovering from congestion
• CPC Class Codes: H04L 47/24 Traffic characterised by specific attributes, e.g. priority or QoS
• CPC Class Codes: H04L 47/726 Reserving resources in multiple paths to be used simultaneously by balancing the load H04L47/125
• CPC Class Codes: H04L 49/354 for supporting virtual local area networks [VLAN]
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones

Abstract

A wide area network using the internet as a backbone utilizing specially selected ISX/ISP providers whose routers route packets of said wide area network along private tunnels through the internet comprised of high bandwidth, low hop-count data paths. Firewalls are provided at each end of each private tunnel which recognize IP packets addressed to devices at the other end of the tunnel and encapsulate these packets in other IP packets which have a header which includes as the destination address, the IP address of the untrusted side of the firewall at the other end of the tunnel. The payload sections of these packets are the original IP packets and are encrypted and decrypted at both ends of the private tunnel using the same encryption algorithm using the same key or keys.

Claims

1. An apparatus, comprising:

an interface to receive packets;

circuitry to identify those packets of the received packets corresponding to a set of one or more predetermined addresses, to identify a set of one or more transmission paths associated with the set of one or more predetermined addresses, and to select a specific transmission path from the set of one or more transmission paths; and

an interface to transmit the packets corresponding to the set of one or more predetermined addresses using the specific transmission path;

wherein

each transmission path of the set of one or more transmission paths is associated with a reserved, non-blocking bandwidth, and

the circuitry is to select the specific transmission path to be a transmission path from the from the set of one or more transmission paths that corresponds to a minimum link cost relative to each other transmission path in the set of one or more transmission paths.

2. The apparatus of claim 1, wherein:

the set of transmission paths is limited to paths that include at least a path segment connecting a cooperating third party service provider.

3. The apparatus of claim 1, wherein:

the minimum link cost is dependent on at least one of quality of service, latency, a bandwidth, and a hop count; and

the circuitry is to select the specific transmission path dependent on provision of at least one of maximum quality of service, minimal latency, maximum and minimum hop count, relative to other transmission paths, if any, in the set of one or more transmission paths.

4. The apparatus of claim 1, wherein the interface to transmit the packets is to use at least one port to couple to a destination using a dedicated line.

5. The apparatus of claim 1, wherein the circuitry is to identify a set of one or more transmission paths meeting the minimum link cost by identifying a load, by identifying a set of known locations from a table, and pruning the set of known locations by eliminating those locations not associated with bandwidth sufficient to meet the load.

6. The apparatus of claim 1, wherein the minimum link cost includes a hop count.

7. The apparatus of claim 1, wherein the minimized link cost comprises a shortest path length.

8. The apparatus of claim 1, wherein the circuitry is to select the specific transmission path based on a list of participating ISX/ISP locations, pruned to eliminate locations that do not meet a threshold transmission criterion, and based on minimum link cost associated with each of the remaining participating ISX/ISP locations.

9. The apparatus of claim 1, wherein each interface is a wide area network (WAN) interface.

10. The apparatus of claim 1, wherein:

the circuitry is to transmit virtual private network (VPN) data represented by packets corresponding to the set of one or more predetermined addresses, using the specific transmission path; and

the circuitry is to encapsulate an encrypted version of the VPN data in another packet having an IP address for a known destination firewall.

11. The apparatus of claim 1, embodied in a network device of a private enterprise, where the interface to receive packets is to couple to a private network controlled by the private enterprise.

12. The apparatus of claim 1, wherein:

the circuitry is to receive packets intended for a private tunnel connection as well as packets intended for a public network; and

the circuitry is further to

compare at least one of a source address or destination address of a received packet with content of a table,

determine whether the received packet represents prioritized traffic dependent on whether the received packet is associated with an address in the set of one or more predetermined addresses,

if the received packet does represent prioritized traffic, to identify the minimum link cost, to identify the set of one or more transmission paths, and to select the specific transmission path, and

if the received packet does not represent prioritized traffic, to select a transmission path that is not part of the set of one or more transmission paths.

13. An apparatus, comprising:

an interface to receive packets;

means for identifying those packets of the received packets corresponding to a set of one or more predetermined addresses, means for identifying a set of one or more transmission paths associated with the set of one or more predetermined address, and means for selecting a specific transmission path from the set of one or more transmission paths; and

an interface to transmit the packets corresponding to the set of one or more predetermined addresses using the specific transmission path;

wherein

each transmission path of the set of one or more transmission paths is associated with a reserved, non-blocking bandwidth, and

the means for selecting is to select the specific transmission path to be a transmission path from the from the set of one or more transmission paths that corresponds to a minimum link cost relative to each other transmission path in the set of one or more transmission paths.

14. An apparatus that receives IP packets and routes the IP packets across a wide area network to one or more locations, comprising:

storage to store a list of transmission paths associated with a reserved, non-blocking bandwidth;

circuitry to determine whether incoming traffic is represents priority traffic that is to be routed to a transmission path associated with the list;

circuitry to

for incoming traffic that is to be routed to a transmission path in the list, select a specific transmission path based on a minimum link cost relative to any other transmission path in the list and transmit the traffic using the specific transmission path via at least one dedicated line,

for other incoming traffic, transmit the other incoming traffic in a manner that does not include using the at least one dedicated line.

15. The apparatus of claim 14, wherein the minimum link cost is based on hop count.

16. The apparatus of claim 14, wherein the circuitry is further to encrypt and encapsulate at least some of the priority traffic to be routed to a transmission path associated with the list.

17. The apparatus of claim 14, wherein the circuitry is to identify a load and a set of known locations from a table, to prune the set of known locations to eliminate from the set locations not associated with bandwidth sufficient to meet the load, and to select between remaining locations in the list to identify the specific transmission path.

18. The apparatus of claim 14, where the circuitry is to select the specific transmission path dependent on at least one of a quality of service parameter, a latency parameter, a bandwidth parameter, and a hop count parameter.

19. The apparatus of claim 14, where the minimum link cost is dependent on a minimum latency, and where the minimum latency is dependent on a number of hops in a connection to a cooperating service provider.

20. The apparatus of claim 14, wherein:

the circuitry is to receive packets intended for a private tunnel connection as well as packets intended for a public network; and

the circuitry is further to

compare at least one of a source address or destination address of a received packet with content of the list,

determine whether the received packet is part of the prioritized traffic dependent on whether the received packet is associated with an address represented by the content of the list,

if the received packet is part of the prioritized traffic, to identify the minimum link cost and to select the specific transmission path, and

if the received packet is not part of the prioritized traffic, to select a transmission path that is not in the list.

21. The apparatus of claim 14, wherein:

the priority traffic comprises packets associated with a set of one or more predetermined addresses; and

the circuitry to determine whether incoming traffic is represents priority traffic is to compare an incoming packet with the set of one or more predetermined addresses, to detect existence of a match between the incoming packet and an address in the set of one or more predetermined address, and to identify the incoming packet as priority traffic in the event of a match.