US 11,902,164 B2 · Using VTI teaming to achieve load balance and redundancy

Abstract

In an embodiment, a computer-implemented method for using virtual tunnel interface teaming to achieve load balance and redundancy in virtual private networks (“VPNs”) is disclosed. In an embodiment, a method comprises: receiving, by a gateway, configuration data from a control plane; based on the configuration data, configuring on the gateway a bonded virtual tunnel interface (“bonded VTI”) having a plurality of slave virtual tunnel interfaces (“slave VTIs”); configuring a plurality of VPN tunnels between the plurality of slave VTIs configured on the gateway and a plurality of slave VTIs configured on a remote gateway; configuring an IPsec VPN tunnel between the bonded VTI configured on the gateway and a corresponding bonded VTI configured on the remote gateway; logically combining the plurality of VPN tunnels into the IPsec VPN tunnel; and enabling communications of IPsec VPN traffic via the IPsec VPN tunnel.

Claims20

Dependent claims

A computer-implemented method for using virtual tunnel interface teaming to achieve load balance and redundancy in virtual private networks (“VPNs”), the method comprising:

receiving configuration data;
based on the configuration data, configuring a first bonded virtual tunnel interface (“bonded VTI”) on a first gateway;
establishing a plurality of VPN tunnels between the first bonded VTI and a second bonded VTI configured on a second gateway;
forming, from the plurality of VPN tunnels, an Internet Protocol Security (“IPsec”) VPN tunnel between the first bonded VTI the second bonded VTI;
and
enabling communications of IPsec VPN traffic between the first gateway and the second gateway via the IPsec VPN tunnel.

3 more elements

An edge service gateway implemented in a computer network and configured to implement virtual tunnel interface teaming approach to achieve load balance and redundancy in virtual private networks (“VPNs”), the edge service gateway comprising:

one or more processors;
one or more memory units;
and
one or more non-transitory computer-readable storage media storing one or more computer instructions which, when executed by the one or more processors, cause the one or more processors to perform:
receiving configuration data;
based on the configuration data, configuring a first bonded virtual tunnel interface (“bonded VTI”) on a first gateway;
establishing a plurality of VPN tunnels between the first bonded VTI and a second bonded VTI configured on a second gateway;
generating, from the plurality of VPN tunnels, an Internet Protocol Security (“IPsec”) VPN tunnel between the first bonded VTI and the second bonded VTI;
and
enabling communications of IPsec VPN traffic between the first gateway and the second gateway via the IPsec VPN tunnel.

7 more elements

Dependencies are inferred from the claim text.

Using VTI teaming to achieve load balance and redundancy

Life of this patent

Using VTI teaming to achieve load balance and redundancy

Life of this patent

Abstract

Claims20