Dynamically defined virtual private network tunnels in hybrid cloud environments

Apparatus, comprising:

• a processor;
• computer memory holding computer program instructions executed by the processor for a virtual private network (VPN) agent to manage a plurality of VPN tunnels between nodes in a first cloud and nodes in a second cloud in a hybrid cloud environment, the computer program instructions comprising:
• program code, operative to receive a request from a first cloud application resident in the first cloud, the request including a first set of requirements for a first VPN tunnel in the plurality of VPN tunnels;
• program code, operative to send a first VPN manager request to a first system in a first cloud, wherein the first system creates the first VPN tunnel according to the first set of requirements;
• program code, operative to receive a request from a second cloud application resident in the first cloud, the request including a second set of requirements for a VPN tunnel in the plurality of VPN tunnels;
• program code, operative to send a second VPN manager request to the first system in a first cloud, wherein the second VPN manager request contains the second set of requirements;
• and
• wherein the second VPN manager request comprises a selected one of either tuning the first VPN tunnel according to both the first and second set of requirements if the first and second requirements are compatible or creating a second VPN tunnel between the first node and the second node if the first and second requirements are not compatible, the second VPN tunnel created by the first system.

A computer program product in a non-transitory computer readable medium for use in a data processing system, the computer program product holding computer program instructions executed by the processor to manage a plurality of VPN tunnels between nodes in a first cloud and nodes in a second cloud in a hybrid cloud environment, the computer program instructions comprising:

• program code, operative to receiving a request from a first cloud application resident in the first cloud, the request including a first set of requirements for a first VPN tunnel in the plurality of VPN tunnels;
• program code, operative to send a first VPN manager request to a first system in a first cloud, wherein the first system creates the first VPN tunnel according to the first set of requirements;
• program code, operative to receive a request from a second cloud application resident in the first cloud, the request including a second set of requirements for a VPN tunnel in the plurality of VPN tunnels;
• program code, operative to send a second VPN manager request to the first system in a first cloud, wherein the second VPN manager request contains the second set of requirements;
• and
• wherein the second VPN manager request comprises a selected one of either tuning the first VPN tunnel according to both the first and second set of requirements if the first and second requirements are compatible or creating a second VPN tunnel between the first node and the second node if the first and second requirements are not compatible, the second VPN tunnel created by the first system.