US 10,313,241 B2 · Systems and methods for routing internet packets between enterprise network sites

Abstract

This disclosure describes methods, devices, and systems related to routing packets over enterprise network sites. A method may be disclosed for routing packets between hosts at a first site and hosts at a second site in a network using a firewall. The method may comprise receiving a request, in a first packet, from a first router to send one or more packets to two or more hosts at the second site. The method may comprise receiving a first sub-network prefix, in a route advertisement, corresponding to two or more hosts at the first site from the first router, and receiving a first community value, in a first advertisement, associated with the first sub-network prefix. The method may comprise generating a first local preference value based at least in part on the first community value. And the method may comprise sending the request, first sub-network prefix, and first local preference value to a second router, in a second advertisement.

Claims18

Dependent claims

A firewall comprising:

at least one memory for storing computer-executable instructions;
and
at least one processor configured to access the at least one memory, wherein the at least one processor is configured to execute the computer-executable instructions to:
receive a request, in a first packet, from a first router to send at least one packet to two or more hosts at a second site,
receive, from the first router, a first sub-network prefix, in a route advertisement, corresponding to the two or more hosts at a first site, and
receive a first community value, in a first advertisement, associated with the first sub-network prefix;
determine a first local preference value based at least in part on the first community value;
send the request, first sub-network prefix, and first local preference value to a second router, in a second advertisement;
receive a second community value from the second router, in a third advertisement, associated with a second sub-network prefix;
generate a second local preference value based at least in part on the second community value and the first local preference value;
and
send the second local preference value to the first router in a fourth advertisement.

9 more elements

A non-transitory computer-readable medium storing computer-executable instructions stored therein, which when executed by at least one processor of a firewall, cause the at least one processor to perform the operation of:

receiving a request, in a first packet, from a first router to send one or more packets to two or more hosts at the second site,
receiving a first sub-network prefix, in a route advertisement, corresponding to two or more hosts at the first site from the first router, and
receiving a first community value, in a first advertisement, associated with the first sub-network prefix;
generating a first local preference value based at least in part on the first community value;
sending the request, first sub-network prefix, and first local preference value to a second router, in a second advertisement;
receiving a second community value from the second router associated with the second sub-network prefix in a third advertisement;
generating a second local preference value based at least in part on the second community value and the first local preference value;
and
sending the second local preference value to the first router in a fourth advertisement.

6 more elements

Dependencies are inferred from the claim text.

Systems and methods for routing internet packets between enterprise network sites

Life of this patent

Systems and methods for routing internet packets between enterprise network sites

Life of this patent

Abstract

Claims18