# US 12,010,022 B1 · Global multi-cloud overlay network with regional preference

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,010,022 B1
- Document ID: US12010022B1
- Status: Granted
- Kind: B1
- Application number: 17/900,858
- Filed: 2022-08-31
- Granted: 2024-06-11
- Earliest claimed: 2021-10-18
- Assignees: Aviatrix Systems, Inc.
- Applicants: Aviatrix Systems, Inc.
- Inventors: Nicholas Delecroix; Praveen Konda
- Web page: https://patentgrep.com/patent/US12010022B1

## CPC

- H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)}
- H04L 45/76: Routing in software-defined topologies, e.g. routing between virtual machines
- H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage}
- H04L 12/4625: {Single bridge functionality, e.g. connection of two networks over a single bridge}
- H04L 12/4645: {Details on frame tagging (routing of packets H04L45/00; support for virtual LAN H04L49/354)}
- H04L 45/64: using an overlay routing layer
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A computerized method for avoiding cross-region communications when utilizing a cloud overlay network is described. The method involves an operation of deploying one or more spoke gateways within at least a first region and a second region of a first virtual private cloud network. Thereafter, a region and a virtual private cloud network associated with a source and a destination of a communication are determined. Upon determining that the destination of the communication resides within a second virtual private cloud network, which is different than the first virtual private cloud network, the routing of the communication between the source and the destination is controlled by one or more spoke gateways solely residing within the region in which the source.

## Claims

### Claim 1

A network, comprising:
a virtual private cloud network including a plurality of regions with each region being an independent geographic area that allows users to host resources including a first region that comprises at least a first workload and a first spoke subnetwork including a first set of spoke gateways and a second region that comprises at least a second workload and a second spoke subnetwork including a second set of spoke gateways; and
a controller comprising logic maintained on a non-transitory storage medium and configured to establish and restrict routing of (i) network traffic from the at least first workload to a spoke gateway of the first set of spoke gateways and (ii) network traffic from at least the second workload to a spoke gateway of the second set of spoke gateways.

### Claim 2 (depends on 1)

The network of claim 1, wherein the controller being further configured to control routing of network traffic between a destination and a source within the virtual private cloud network by native cloud constructs associated with a cloud service provider (CSP) underlay network.

### Claim 3 (depends on 2)

The network of claim 2, wherein the source is a first application instance residing in the first region and communicatively coupled to a first spoke gateway of the first set of spoke gateways and is prevented from being connected to a second spoke gateway residing in the second region different than the first region of the first virtual private cloud network.

### Claim 4 (depends on 1)

The network of claim 1, wherein the virtual private cloud network is deployed as part of a first public cloud network.

### Claim 5 (depends on 4)

The network of claim 4, wherein the first set of spoke gateways is deployed as part of a cloud overlay network further including at least a transit gateway and a spoke gateway deployed within a second virtual private cloud network different than the first virtual private cloud network.

### Claim 6 (depends on 5)

The network of claim 5, wherein the second virtual private cloud network is part of a second public cloud network different than the first public cloud network.