System and method for optimal multiserver VPN routing
AssigneeNetflow, UAB
InventorsKarolis Kaciulis, Donatas Budvytis
Life of this patent
Estimating the term…
Abstract
A method and system for a VPN setup in which one of the peers' outgoing traffic is dynamically rerouted to exit VPN servers based on infrastructure or user requirements without losing the initial connection state or leaking unencrypted network traffic is described. One exemplary embodiment describes a method for a client to change their routing to multiple server locations. Another exemplary embodiment describes a method for the entry VPN servers to reroute traffic based on strategic traffic analysis.
Claims19
A method for routing a VPN connection, the method comprising:
- establishing, between an entry VPN server and a user device, a single VPN connection;
- receiving, at the entry VPN server from the user device, a first traffic;
- forwarding, from the entry VPN server, the first traffic through a first exit VPN server;
- aggregating, at the entry VPN server, data activity packets from the first traffic into a traffic information;
- matching, at the entry VPN server, the traffic information with a configuration strategy to route the first traffic from the user device through a second exit VPN server, different from the first exit VPN server;
- assigning, at the entry VPN server, the configuration strategy to the user device to route traffic through the second exit VPN server;
- receiving, at the entry VPN server from the user device, a second traffic originating from the user device after the first traffic has originated from the user device;
- and
- forwarding, at the entry VPN server, the second traffic through the second exit VPN server,
- wherein a single VPN connection is maintained between the user device and the entry VPN server to service the first traffic and the second traffic.
A computing apparatus for routing a VPN connection, the apparatus comprising:
- at least one processor;
- and
- a memory coupled to the at least one processor, the memory storing computer-executable instructions that, when executed by the at least one processor, operate the apparatus to perform a method comprising:
- establishing, between an entry VPN server and a user device, a single VPN connection;
- receiving, at the entry VPN server from the user device, a first traffic;
- forwarding, from the entry VPN server, the first traffic through a first exit VPN server;
- aggregating, at the entry VPN server, data activity packets from the first traffic into a traffic information;
- matching, at the entry VPN server, the traffic information with a configuration strategy to route the first traffic from the user device through a second exit VPN server, different from the first exit VPN server;
- assigning, at the entry VPN server, the configuration strategy to the user device to route traffic through the second exit VPN server;
- receiving, at the entry VPN server from the user device, a second traffic originating from the user device after the first traffic has originated from the user device;
- forwarding, at the entry VPN server, the second traffic through the second exit VPN server,
- wherein a single VPN connection is maintained between the user device and the entry VPN server to service the first traffic and the second traffic.
A non-transitory computer-readable medium comprising stored computer-executable instructions, the computer-executable instructions configured to implement a method for routing a VPN connection comprising:
- establishing, between an entry VPN server and a user device, a single VPN connection;
- receiving, at the entry VPN server from the user device, a first traffic;
- forwarding, from the entry VPN server, the first traffic through a first exit VPN server;
- aggregating, at the entry VPN server, data activity packets from the first traffic into a traffic information;
- matching, at the entry VPN server, the traffic information with a configuration strategy to route the first traffic from the user device through a second exit VPN server, different from the first exit VPN server;
- assigning, at the entry VPN server, the configuration strategy to the user device to route traffic through the second exit VPN server;
- receiving, at the entry VPN server from the user device, a second traffic originating from the user device after the first traffic has originated from the user device;
- forwarding, at the entry VPN server, the second traffic through the second exit VPN server,
- wherein a single VPN connection is maintained between the user device and the entry VPN server to service the first traffic and the second traffic.
Dependencies are inferred from the claim text.