Method and system of establishing a virtual private network in a cloud service for branch networking

A computerized system useful for implementing a virtual private network (VPN), the system comprising:

• an edge device that automatically establishes an Internet Protocol Security (IPsec) tunnel alongside an unsecure Multipath Protocol (MP) tunnel with a gateway device in a public cloud in preparation for a transmission of a secure traffic communication, wherein the edge device has a list of local subnets, and wherein the edge device sends the list of local subnets to the gateway device during an initial MP tunnel establishment handshake message exchange between the edge device and the gateway device, wherein each local subnet includes an indication of whether the local subnet is reachable over the VPN;
• the gateway device automatically establishing the IP sec tunnel alongside the unsecure MP tunnel with the edge device;
• and
• an orchestrator module operating on an enterprise datacenter server that receives a toggle-the-VPN command and enables the VPN on the orchestrator module, and wherein the orchestrator module informs the edge device that the list of local subnets is accessible over the VPN, causing the edge device to update the gateway device with a new list of local subnets of the edge device that are accessible over the VPN.