Unification of data flows over network links with different internet protocol (IP) addresses

A computer implemented method of opening connections in a gateway of a cloud based network for client devices connected via two different network links to the gateway and to a Software Defined Perimeter (SDP) controller comprising:

• using an SDP controller of a cloud based network, the SDP controller is used for:
• receiving, by the SDP controller, at least one connection request from at least one client device to connect to a gateway of the cloud based network, the at least one client device is connected to the SDP controller via a first network link using a first Internet Protocol (IP) address and to the gateway via a second network link using a second IP address;
• generating, by the SDP controller, at least one one-time Single Packet Authentication (SPA) key for the at least one client device after authenticated, the at least one one-time SPA key having a predefined expiration time;
• and storing, by the SDP controller, the at least one one-time SPA key in at least one access keys repository accessible to a gateway;
• wherein the gateway is configured to retrieve the at least one one-time SPA key from the at least one access keys repository and open at least one connection for the at least one client device via the second network link based on validation of at least one one-time SPA key received from the at least one client device compared to the retrieved at least one one-time SPA key;
• wherein the at least one one-time SPA key is transmitted by the SDP controller to the at least one client device via the first network link.

A gateway for connecting client devices to a cloud based network via a first network link after authorized by a Software Defined Perimeter (SDP) controller connected via a second network link, comprising:

• a gateway of at least one cloud based network, the gateway is configured to:
• access, by the gateway, at least one access keys repository to retrieve at least one one-time Single Packet Authentication (SPA) key generated by an SDP controller of at least one cloud based network for at least one client device connected to the SDP controller via a first network link using a first Internet Protocol (IP) address, the at least one one-time SPA key having a predefined expiration time is transmitted by the SDP controller to the at least one client device;
• receive, by the gateway, the at least one one-time SPA key from the at least one client device, the at least one client device is connected to the gateway via a second network link using a second IP address;
• validate, by the gateway, the at least one one-time SPA key received from the at least one client device compared to the retrieved at least one one-time SPA key;
• and open, by the gateway, a connection for the at least one client device via the second network link in case the at least one one-time SPA key is valid key;
• wherein the at least one one-time SPA key is transmitted by the SDP controller to the at least one client device via the first network link.

A computer implemented method of connecting client devices to a gateway of a cloud based network via a first network link after authorized by a Software Defined Perimeter (SDP) controller connected via a second network link, comprising:

• using a gateway of at least one cloud based network for:
• accessing, by the gateway, at least one access keys repository to retrieve at least one one-time Single Packet Authentication (SPA) key generated by an SDP controller of the at least one cloud based network for at least one client device connected to the SDP controller via a first network link using a first Internet Protocol (IP) address, the at least one one-time SPA key having a predefined expiration time is transmitted by the SDP controller to the at least one client device;
• receiving, by the gateway, the at least one one-time SPA key from the at least one client device, the at least one client device is connected to the gateway via a second network link using a second IP address;
• validating, by the gateway, the at least one one-time SPA key received from the client device compared to the retrieved at least one one-time SPA key;
• and opening, by the gateway, a connection for the at least one client device via the second network link in case the one-time SPA key is valid;
• wherein the at least one one-time SPA key is transmitted by the SDP controller to the at least one client device via the first network link.