Private virtual network replication of cloud databases
AssigneeSnowflake Inc.
InventorsRobert Bengt Benedikt Gernhardt, Mikhail Kazhamiaka, Eric Robinson, Rodney Weaver
Life of this patent
Estimating the term…
Abstract
A network device communication system can configure network devices (e.g., a primary and secondary database) to send and receive sequences messages, such as replication data, over a channel comprising a plurality of private network nodes. The messages can be generated and encrypted using one or more key pairs and changing wrapping replication keys to send and receive the messages between different types of database deployments.
Claims24
A method comprising:
- identifying, by a first database deployment, a virtual private network comprising a plurality of virtual private network nodes, the virtual private network connected to a plurality of virtual private clouds including the first database deployment on a first virtual private cloud and a second database deployment on a second virtual private cloud;
- generating, by the first database deployment, database items to be replicated to the second database deployment;
- determining that the database items are for transmission to one or more proxy servers on the second virtual private cloud;
- and
- in response to determining that the database items are for transmission to the second virtual private cloud, exporting, using a hosted connection of the first virtual private cloud, the database items to the virtual private network for transmission to the to the one or more proxy servers on the second virtual private cloud, the database items being transmitted to the second virtual private cloud using the virtual private network nodes of the virtual private network, the database items being transmitted from the first virtual private cloud to the second virtual private cloud in a sequence of encrypted messages, each encrypted message being encrypted by a changing symmetric key and a public key of the second database deployment, the second database deployment receiving the database items from the virtual private network using another hosted connection that imports the database items to the second database deployment.
A system comprising:
- one or more processors of a machine;
- and
- a memory storing instructions that, when executed by the one or more processors, cause the machine to perform operations comprising:
- identifying, by a first database deployment, a virtual private network comprising a plurality of virtual private network nodes, the virtual private network connected to a plurality of virtual private clouds including the first database deployment on a first virtual private cloud and a second database deployment on a second virtual private cloud;
- generating, by the first database deployment, database items to be replicated to the second database deployment;
- determining that the database items are for transmission to one or more proxy servers on the second virtual private cloud;
- and
- in response to determining that the database items are for transmission to the second virtual private cloud, exporting, using a hosted connection of the first virtual private cloud, the database items to the virtual private network for transmission to the to the one or more proxy servers on the second virtual private cloud, the database items being transmitted to the second virtual private cloud using the plurality of using the virtual private network nodes of the virtual private network, the database items being transmitted from the first virtual private cloud to the second virtual private cloud in a sequence of encrypted messages, each encrypted message being encrypted by a changing symmetric key and a public key of the second database deployment, the second database deployment receiving the database items from the virtual private network using another hosted connection that imports the database items to the second database deployment.
A non-transitory computer-storage medium embodying instructions that, when executed by a machine, cause the machine to perform operations comprising:
- identifying, by a first database deployment, a virtual private network comprising a plurality of virtual private network nodes, the virtual private network connected to a plurality of virtual private clouds including the first database deployment on a first virtual private cloud and a second database deployment on a second virtual private cloud;
- generating, by the first database deployment, database items to be replicated to the second database deployment;
- determining that the database items are for transmission to one or more proxy servers on the second virtual private cloud;
- and
- in response to determining that the database items are for transmission to the second virtual private cloud, exporting, using a hosted connection of the first virtual private cloud, the database items to the virtual private network for transmission to the to the one or more proxy servers on the second virtual private cloud, the database items being transmitted to the second virtual private cloud using the plurality of using the virtual private network nodes of the virtual private network, the database items being transmitted from the first virtual private cloud to the second virtual private cloud in a sequence of encrypted messages, each encrypted message being encrypted by a changing symmetric key and a public key of the second database deployment, the second database deployment receiving the database items from the virtual private network using another hosted connection that imports the database items to the second database deployment.
Dependencies are inferred from the claim text.