Multi-tenant virtual private network microsegmentation
AssigneeAlkira, Inc.
InventorsShreyas Heranjal, Robin James
Life of this patent
Estimating the term…
Abstract
What is disclosed is tagging a first flow of a multi-tenant virtual private network (VPN) with a first tag. Continuously tracking, based on the first tag, the first flow of the multi-tenant VPN. Capturing one or more characteristics of the first flow of the multi-tenant VPN. Categorizing the first flow of the multi-tenant VPN based on the one or more characteristics of the first flow. Providing the categorization of the first flow to a first tenant of the multi-tenant VPN. Receiving, based on input from the first tenant and the categorization of the first flow, a first policy. Enforcing the first policy on the first flow based on the first tag of the first flow and the continuous tracking of the first flow.
Claims20
A system comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the system to perform:
- tagging a first flow of a multi-tenant virtual private network (VPN) with a first tag;
- continuously tracking, based on the first tag, the first flow of the multi-tenant VPN;
- capturing one or more characteristics of the first flow of the multi-tenant VPN;
- categorizing the first flow of the multi-tenant VPN based on the one or more characteristics of the first flow;
- providing the categorization of the first flow to a first tenant of the multi-tenant VPN;
- receiving, based on input from the first tenant and the categorization of the first flow, a first policy;
- enforcing the first policy on the first flow based on the first tag of the first flow and the continuous tracking of the first flow.
A method implemented by a computing system including one or more processors and storage media storing machine-readable instructions, wherein the method is performed using the one or more processors, the method comprising:
- tagging a first flow of a multi-tenant virtual private network (VPN) with a first tag;
- continuously tracking, based on the first tag, the first flow of the multi-tenant VPN;
- capturing one or more characteristics of the first flow of the multi-tenant VPN;
- categorizing the first flow of the multi-tenant VPN based on the one or more characteristics of the first flow;
- providing the categorization of the first flow to a first tenant of the multi-tenant VPN;
- receiving, based on input from the first tenant and the categorization of the first flow, a first policy;
- enforcing the first policy on the first flow based on the first tag of the first flow and the continuous tracking of the first flow.
Dependencies are inferred from the claim text.