Failure detection and seamless traffic switchover using a VPN system
AssigneeHewlett Packard Enterprise Development LP
InventorsShravan Kumar Vuggrala, Raghunandan Prabhakar
Life of this patent
Estimating the term…
Abstract
Example implementation relates to a method of failure detection and seamless traffic switchover in a VPN system. A cluster of nodes exchange heartbeat messages to detect a failure at a first node in the cluster. When failure is detected at the first node, a master node transmits a failover message to a network end node connected to the first node. The failover message includes a list of active nodes to which traffic may be routed. The network end node updates its routing table based on the failover message and switches the traffic to a second node in the cluster of nodes.
Claims18
A virtual private network (VPN) system comprising:
- a plurality of network end nodes connected to a cluster of nodes;
- a processor associated with a master node of the cluster of nodes;
- a first machine-readable medium storing instructions that, when executed by the processor of the master node, causes the processor to:
- exchange heartbeat messages between the nodes in the cluster to detect a failure of a node in the cluster of nodes;
- and
- in response to detecting the failure of a first node in the cluster of nodes, transmit a failover message to a network end node connected to the first node, wherein the failover message comprises of a list of active nodes in the cluster of nodes;
- wherein the network end node comprises a network end node processor and a second machine-readable medium storing instructions that, when executed by the network end node processor, causes the network end node processor to:
- receive the failover message from the master node of the cluster of nodes;
- update a route table of the network end node based on the failover message;
- and
- switch route of traffic to a second node in the cluster of nodes based on the updated route table.
A method for seamless failover in a VPN system, the method comprising:
- exchanging heartbeat messages between the nodes in a cluster of nodes to detect a failure of a node in the cluster of nodes, wherein the cluster of nodes is connected to a plurality of network end nodes;
- in response to detecting the failure of a first node in the cluster of nodes, transmitting by a master node in the cluster of nodes a failover message to a network end node connected to the first node,
- wherein the failover message comprises of a list of active nodes in the cluster of nodes;
- receiving, at the network end node, the failover message from the master node of the cluster of nodes;
- updating, a route table of the network end node based on the failover message;
- and
- switching route of traffic to a second node in the cluster of nodes based on the updated route table.
A first non-transitory machine-readable storage medium comprising first instructions and a second non-transitory machine-readable storage medium comprising second instructions, the first instructions executable by a first processor to:
- exchange heartbeat messages between the nodes in a cluster of nodes to detect a failure of a node in the cluster of nodes;
- and
- in response to detecting the failure of a first node, transmit a failover message to a network end node connected to the first node, wherein the failover message comprises of a list of active nodes in the cluster of nodes;
- and
- the second instructions executable by a second processor to:
- receive the failover message from the master node of the cluster of nodes;
- update a route table of the network end node based on the failover message;
- and
- switch route of traffic to a second node in the cluster of nodes based on the updated route table.
Dependencies are inferred from the claim text.