US 11,240,152 B2Granted

Exposing a subset of hosts on an overlay network to components external to the overlay network without exposing another subset of hosts on the overlay network

AssigneeOracle International Corporation

InventorsPeter John Hill, David Allen McArthur, Jagwinder Singh Brar, Vivek Bhanu, Chris Higgins

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques for exposing a subset of hosts on an overlay network, without exposing another subset of hosts on the overlay network, are disclosed. A component associated with an overlay network exposes a subset of hosts on the overlay network to components external to the overlay network. The component exposes the subset of hosts by distributing a mapping between (a) the hosts to-be-exposed and (b) the substrate addresses associated with the hosts. Alternatively, a component external to an overlay network exposes a subset of hosts on the overlay network to additional components external to the overlay network. The component exposes the subset of hosts by distributing a mapping between (a) the hosts to-be-exposed and (b) a substrate address associated with the particular component. In either embodiment, a mapping for hosts to-be-hidden is not distributed.

Claims21

Dependent claims

One or more non-transitory machine-readable media storing instructions which, when executed by one or more processors, cause:

identifying a first policy, administered by a first entity, that manages communication between a first gateway and a second gateway;
identifying a second policy, administered by a second entity, that manages the communication between the first gateway and the second gateway;
wherein the first gateway and the second gateway directly or indirectly connect a first overlay network and a second overlay network;
wherein the first policy allows a first subset of hosts of the first overlay network to be exposed to the second gateway, the first subset of exposed hosts including a first host of the first overlay network and a second host of the first overlay network;
wherein the second policy allows a second subset of hosts of the first overlay network to be exposed to the second gateway, the second subset of exposed hosts including the first host of the first overlay network but not including the second host of the first overlay network;
responsive to determining that both the first policy and the second policy allow the first host of the first overlay network to be exposed to the second gateway:
transmitting, via the first gateway, a first set of routing information for the first host toward the second gateway;
wherein the first set of routing information for the first host comprises a mapping between (a) an overlay network address corresponding to the first host and (b) a substrate address which may be used to transmit communication via the substrate network toward the overlay network address;
responsive to determining that the second policy does not allow the second host of the first overlay network to be exposed to the second gateway:
refraining from transmitting, via the first gateway, any routing information for the second host toward the second gateway.

7 more elements

A system, comprising:

at least one device including a hardware processor;
and
the system being configured to perform operations comprising:
identifying a first policy, administered by a first entity, that manages communication between a first gateway and a second gateway;
identifying a second policy, administered by a second entity, that manages the communication between the first gateway and the second gateway;
wherein the first gateway and the second gateway directly or indirectly connect a first overlay network and a second overlay network;
wherein the first policy allows a first subset of hosts of the first overlay network to be exposed to the second gateway, the first subset of exposed hosts including a first host of the first overlay network and a second host of the first overlay network;
wherein the second policy allows a second subset of hosts of the first overlay network to be exposed to the second gateway, the second subset of exposed hosts including the first host of the first overlay network but not including the second host of the first overlay network;
responsive to determining that both the first policy and the second policy allow the first host of the first overlay network to be exposed to the second gateway:
transmitting, via the first gateway, a first set of routing information for the first host toward the second gateway;
wherein the first set of routing information for the first host comprises a mapping between (a) an overlay network address corresponding to the first host and (b) a substrate address which may be used to transmit communication via the substrate network toward the overlay network address;
responsive to determining that the second policy does not allow the second host of the first overlay network to be exposed to the second gateway:
refraining from transmitting, via the first gateway, any routing information for the second host toward the second gateway.

10 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/416,154Filed 18 May 2019 · continuation
Priority: 2 Sep 2016
Published: US 2019/0273680 A15 Sep 2019
Granted: 1 Feb 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification3 codes

H04L 45/64
Routing or path finding of packets in data switching networks: using an overlay routing layer
H04L 12/66
Data switching networks: arrangements for connecting between networks having differing types of switching systems, e.g. gateways
H04L
Digital communication

Family

Application15/256,361Parent of this continuation · filed 2 Sep 2016
US 2019/0273680 A1Pre-grant publication · published 5 Sep 2019
US 10,389,628 B2Parent of this continuation
US 10,348,622 B2Related patent
US 2018/0069787 A1Published application
US 11,240,152 B2This patent

From the US filing history. Foreign family members aren’t listed.