Routing messages between virtual networks

• US 9,942,143 B2
• Filed: 06/27/2017
• Issued: 04/10/2018
• Est. Priority Date: 01/08/2014
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Patel, Parveen
• Primary Examiner(s): Onamuti, Gbemileke J
• Application Number:
  US15/634,872
• Publication Number:
  US 20170295096A1
• Time in Patent Office: 287 Days
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 61/106 across networks, e.g. mapping telephone numbers to data network addresses
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]

Abstract

Routing messages between virtual networks using a mapping of virtual addresses from one virtual network to a virtual address of the other virtual network. Each virtual network has a valid set of virtual addresses, some of which being assigned to virtual nodes within the corresponding network. When a virtual network identifies a message to be sent, it identifies a destination for the message. Some destinations may be within the same virtual network and thus may be routed to virtual nodes within the virtual network. Other destinations may instead be mapped to a virtual address of another virtual network. In that case, routing information may also be obtained and the message may be dispatched to the virtual address of the other virtual network. This may be performed without the need for a gateway, which publishes a public address that is globally unique.

Claims

1. A computer system, comprising:

one or more processors; and

one or more computer readable storage media having stored thereon computer-executable instructions that are executable by the one or more processors to cause the computer system to perform a method for routing a message from a first virtual network to a second virtual network without the use of a gateway, the method including;

the first virtual network identifying a destination for a message;

the first virtual network accessing an internal record associated with the destination virtual network, the record containing at least a first plurality of virtual addresses assigned to first virtual nodes in the first virtual network and a second plurality of virtual addresses assigned to second virtual nodes in the second virtual network, wherein at least one of the second plurality of valid virtual addresses is reached by the first virtual network without use of a remote gateway that publishes globally unique addresses for network destinations;

the first virtual network determining from the internal record, that the message destination is mapped to a valid virtual address associated with a virtual node of the second virtual network; and

routing the message towards the virtual address of the second virtual network.

2. A computer system in accordance with claim 1, wherein the method further includes:

identifying the destination for a message comprises an act of identifying a uniform resource locator of the destination of the message;

accessing a record associated with the destination comprises an act of access an entry for the uniform resource locator within a domain name server external to the first virtual network,

wherein the entry maps the uniform resource locator to the virtual address of the second virtual network.

3. A computer system in accordance with claim 1, wherein the method further includes:

identifying the destination for a message comprises identifying a destination virtual address that is one of the first plurality of valid virtual addresses,

the record associated with the destination being within the first virtual network, the record including at least two separate tables, the at least two separate tables including an internal address routing information table and an external address routing information table.

4. A computer system in accordance with claim 3, the act of routing comprising:

routing the message in a manner that when the second virtual network handles a reply to the message, the reply is sent to a valid virtual address of the second virtual network.

5. A computer system in accordance with claim 3, wherein the second virtual network is configured such that when the reply with the valid virtual address of the second virtual network is handled, the reply is routed towards a virtual node in the first virtual network that transmitted the message.

6. A computer system in accordance with claim 4, wherein the virtual address of the second virtual network is a valid virtual address of the first virtual network, but nonetheless the message is routed to the second virtual network.

7. A computer system in accordance with claim 3, the message being a first message, the destination virtual address being a first destination virtual address, the record being a first record, the virtual address of the second virtual network being a first virtual address of the second virtual network, the method further comprising:

identifying a second destination virtual address for a second message, the second destination virtual address being one of the first plurality of valid virtual addresses;

accessing a second record associated with the second destination virtual address;

determining from the second record, that the second destination virtual address is mapped to a second virtual address of the second virtual network; and

routing the second message towards the second virtual address of the second virtual network.

8. A computer system in accordance with claim 3, the message being a first message, the destination virtual address being a first destination virtual address, the record being a first record, the method further comprising:

identifying a second destination virtual address for a second message the second destination virtual address being one of the first plurality of valid virtual addresses;

accessing a second record associated with the second destination virtual address;

determining from the second record, that the second destination virtual address is mapped to a virtual address of a third virtual network; and

routing the second message towards the virtual address of the third virtual network.

9. A computer system in accordance with claim 3, the message being a first message, the destination virtual address being a first destination virtual address, the record being a first record, the method further comprising:

identifying a second destination virtual address for a second message;

accessing a second record associated with the second destination virtual address;

determining from the second record, that the second destination virtual address is within the first virtual network; and

routing the second message towards the second destination virtual address of the first virtual network.

10. A computer system in accordance with claim 3, the virtual address of the second virtual network being unassigned to a virtual node of the second virtual network.

11. A computer system in accordance with claim 1, the virtual address of the second virtual network being assigned to a virtual node of the second virtual network.

12. A computer system in accordance with claim 1, wherein the virtual address of the second virtual network is an invalid virtual address of the first virtual network.

13. A computer system in accordance with claim 1, the record being a first record, the method further comprising:

the second virtual network receiving the message destined for the virtual address of the second virtual network;

the second virtual network accessing a record associated with the virtual address of the second virtual network;

the second virtual network determining from the record, that the virtual address of the second virtual network is mapped to a virtual address of a third virtual network; and

routing the message towards the virtual address of the third virtual network.

14. A computer program product comprising one or more computer-readable storage devices having thereon one or more computer-executable instructions that are structured such that, when executed by one or more processors of a computing system, cause the computing system to perform a method for supporting transmission of messages from a particular virtual network to one or more external virtual networks without the use of a gateway, the method comprising:

the particular virtual network maintaining internal routing information for a first plurality of virtual addresses that are valid virtual addresses for a source virtual network and that are associated with a plurality of virtual nodes within the source virtual network; and

the particular virtual network maintaining external routing information for a second plurality of virtual addresses that are valid virtual addresses within the source virtual network, but which are each mapped to a valid address in a plurality of corresponding virtual nodes in a corresponding external virtual network, wherein at least one of the second plurality of valid virtual addresses is reached by the first virtual network without use of a remote gateway that publishes globally unique addresses for network destinations.

15. The computer program product in accordance with claim 14, wherein the computer-readable storage media further has thereon one or more computer-executable instructions that are structured such that, when executed by the one or more processors, further cause the computing system to prepare for operation and/or operate external routing logic, the external routing logic configured to perform a routing method comprising the following upon received a message that has a destination virtual address that is a virtual address of the second plurality of virtual addresses:

determining that the destination virtual address is a virtual address of the second plurality of virtual addresses;

accessing the external routing information associated with the destination virtual address;

determining from the record, that the destination virtual address is mapped to a virtual address of the second virtual network; and

routing the message towards the virtual address of the second virtual network.

16. The computer program product in accordance with claim 15, the external routing logic further configured to perform:

routing the message in a manner that when the second virtual network handles a reply to the message, the reply is sent to a valid virtual address of the second virtual network.

17. The computer program product in accordance with claim 15, wherein the computer-readable storage media further has thereon one or more computer-executable instructions that are structured such that, when executed by the one or more processors, further cause the computing system to prepare for operation and/or operate internal routing logic, the internal routing logic configured to perform a routing method comprising the following upon received a message that has a destination virtual address that is a virtual address of the first plurality of virtual addresses:

determining that the destination virtual address is a virtual address of the first plurality of virtual addresses;

identifying a second destination virtual address for a second message;

accessing a second record associated with the second destination virtual address;

determining from the second record, that the second destination virtual address is within the first virtual network; and

routing the second message towards the second destination virtual address of the first virtual network.

18. The computer program product in accordance with claim 14, the virtual address of the second virtual network being assigned to a virtual node of the second virtual network.

19. The computer program product in accordance with claim 14, the virtual address of the second virtual network not being assigned to a virtual node of the second virtual network.

20. A method for routing a message from a first virtual network to a second virtual network without the use of a gateway, the method comprising:

the first virtual network having a first plurality of valid virtual addresses some of which being assigned to virtual nodes in the first virtual network, the second virtual network having a second plurality of valid virtual addresses, the method comprising;

the first virtual network identifying a destination for a message;

the first virtual network accessing an internal record associated with the destination virtual network, the record containing at least the first plurality of virtual addresses and the second plurality of virtual addresses, wherein at least one of the second plurality of valid virtual addresses is an address other than a globally unique address;

the first virtual network determining from the internal record, that the message destination is mapped to a valid virtual address associated with a virtual node of the second virtual network; and

routing the message towards the virtual address of the second virtual network.