US 11,637,813 B2 · Container deployment for a network

Abstract

A device can determine that a container is deployed in a front-end of a private network. The container can include a self-contained execution environment. The container can include an interface that is configured for directing network traffic between the front-end of the private network and one or more applications operating in a back-end of the private network. The device can configure an interface of the container for directing network traffic between an external network and the container. The device can configure a firewall of the front-end of the private network to permit routing of network traffic between the external network and the container. The device can advertise a route for directing network traffic between the external network and the container. The device can perform routing of network traffic between the one or more applications operating in the back-end of the private network and the external network using the container.

Claims20

Dependent claims

A method, comprising:

identifying, by a device, a container associated with a first portion of a first network,
wherein the container includes a first interface that is configured for directing network traffic between the first portion of the first network and one or more applications operating in a second portion of the first network, and
wherein the first interface is associated with a first network address range associated with a private network;
configuring, by the device, a second interface of the container for directing network traffic between a second network and the container,
wherein the second interface is associated with a second network address range associated with a public network;
advertising, by the device, information associated with a route for directing first network traffic between the second network and the container;
and
routing, by the device and based on advertising the information associated with the route, second network traffic between the one or more applications operating in the second portion of the first network and the second network.

5 more elements

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:

one or more instructions that, when executed by one or more processors of a device, cause the device to:
identify a container associated with a first portion of a first network,
wherein the container includes a first interface that is configured for directing network traffic between the first portion of the first network and one or more applications operating in a second portion of the first network, and
wherein the first interface is associated with a first network address range associated with a private network;
configure a second interface of the container for directing network traffic between a second network and the container,
wherein the second interface is associated with a second network address range associated with a public network;
advertise information associated with a route for directing first network traffic between the second network and the container;
and
route, based on advertising the information associated with the route, second network traffic between the one or more applications operating in the second portion of the first network and the second network.

6 more elements

Dependencies are inferred from the claim text.

Container deployment for a network

Life of this patent

Container deployment for a network

Life of this patent

Abstract

Claims20