# US 12,192,279 B2 · System and method for non-disruptive migration of software components to a public cloud system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,279 B2 - Document ID: US12192279B2 - Status: Granted - Kind: B2 - Application number: 18/231,224 - Filed: 2023-08-07 - Published: 2023-12-21 - Granted: 2025-01-07 - Earliest claimed: 2017-08-28 - Assignees: Aviatrix Systems, Inc. - Applicants: Aviatrix Systems, Inc. - Inventors: Xiaobo Sherry Wei - Web page: https://patentgrep.com/patent/US12192279B2 ## CPC - H04L 61/2514: between local and global IP addresses - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - G06F 9/45558: {Hypervisor-specific management and integration aspects} - H04L 61/5007: Internet protocol [IP] addresses - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L 67/34: {involving the movement of software or configuration parameters (network booting or remote initial program loading [RIPL] G06F9/4416)} - G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances} - H04L 61/103: across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP] - H04L 61/5038: for local use, e.g. in LAN or USB networks, or in a controller area network [CAN] - H04L 2101/622: Layer-2 addresses, e.g. medium access control [MAC] addresses - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system supporting transferring content between an on-premises network and a public cloud network includes a first cloud computing platform comprising a first software instance having a first IP address, a subnet configured to extend across on-premises network and a public cloud network, a first gateway associated with the on-premises network, a second gateway associate with the public cloud network, a secure communication path between the first and second gateways. The subnet comprises a shared IP address range between the public cloud network and the on-premises network, and the first IP address of the first software instance is the same as an IP address of the first software instance that resided on the on-premises network. ## Claims ### Claim 1 A system supporting transferring content between an on-premises network and a public cloud network, comprising: a first gateway associated with the on-premises network, the first gateway comprising hardware and software, the first gateway further comprising a first address control logic configured to resolve linked layer addressing of a host of the cloud; a second gateway associated with the public cloud network, the second gateway comprising: a second address control logic configured to resolve linked layer addressing of a host of the on-premises network, and a proxy network interface for each host in a subnet of the on-premises network to allow the public cloud network to be aware of hosts of the on-premises network; a secure communication path between the first and second gateways that extends the subnet of the on-premises network to the public cloud network, wherein the extended subnet comprises a shared IP address range between the public cloud network and the on-premises network; and data control logic deployed within the first and second gateways configured to route messages from hosts of the subnet so that an on-premises network logic may communicate with a software component that was migrated from the on-premises network to the public cloud network. ### Claim 2 (depends on 1) The system of claim 1, wherein the secured connection path is a tunnel over DX or IPSec. ### Claim 3 (depends on 1) The system of claim 1, wherein the link layer address comprises a MAC address assigned to the host of the on-premises network. ### Claim 4 (depends on 1) The system of claim 1, wherein the first gateway is virtualized and is comprised of software. ### Claim 5 (depends on 1) The system of claim 1, wherein the hardware comprises a processor and a communication interface. ### Claim 6 (depends on 5) The system of claim 5, wherein in the hardware comprises a non-transitory computer-readable storage medium that stores a tunneling logic, a MAC address resolution logic, and a NAT logic. ### Claim 7 (depends on 6) The system of claim 6, wherein the non-transitory computer-readable storage medium includes a data store that maintains information associated with the first software instance. ### Claim 8 (depends on 7) The system of claim 7, wherein the MAC address resolution logic, upon execution by the processor, is configured to detect an ARP request and accesses content of the non-transitory computer-readable storage medium to determine if the ARP request is directed to first software instance. ### Claim 9 (depends on 8) The system of claim 8, wherein the MAC address resolution logic is configured to generate an ARP reply including a MAC address of the second gateway. ### Claim 10 (depends on 7) The system of claim 7, wherein the second gateway comprises a MAC address resolution logic configured as a proxy interface. ### Claim 11 (depends on 10) The system of claim 10, wherein the proxy interface enables the public cloud network to identify the host of the on-premises network targeted by an ARP request message initiated by the host of the public cloud network and issue an ARP reply message. ### Claim 12 (depends on 11) The system of claim 11, wherein the proxy interface forwards traffic to and from the host of the on-premises network. ### Claim 13 (depends on 6) The system of claim 6, wherein: the processor and the communication interface are coupled together via a transmission medium; and the secure communication path is established by the communication interface. ### Claim 14 (depends on 6) The system of claim 6, wherein the NAT logic, upon execution by the processor, is configured to perform translation of an IP address for data packets transmitted between the host of the on-premises network and a host of the cloud computing network using a phantom subnet. ### Claim 15 (depends on 14) The system of claim 14, wherein the NAT logic creates a destination NAT entry to translate the first IP address from a real IP address associated with the subnet into a temporary IP address associated with the phantom subnet. ### Claim 16 (depends on 14) The system of claim 14, wherein an inverse translation is conducted where the temporary IP address associated with the phantom subnet is returned back to the real IP address associated with the subnet.