System and method for virtual interfaces and advanced smart routing in a global virtual network

A method for connecting devices via a virtual overlay network spanning a plurality of geographical regions and at least partially overlying a network using packets forwarded based at least in part on an Internet protocol, comprising:

• at each of an endpoint device, a first access point server providing access to a first geographical region via the virtual overlay network, and a second access point server providing access to a second geographical region via the virtual overlay network, receiving, from a control server for the virtual overlay network, respective peering information and credentials;
• the endpoint device and the first access point server automatically establishing at least two secure first tunnels between the endpoint device and the first access point server, based at least in part on their respective peering information and credentials, the at least two secure first tunnels each egressing the endpoint device at a common physical interface;
• the endpoint device and the second access point server automatically establishing at least two secure second tunnels between the endpoint device and the second access point server, based at least in part on their respective peering information and credentials, the at least two secure second tunnels each egressing the endpoint device at the common physical interface;
• the endpoint device automatically configuring a first virtual interface to provide the endpoint device a logical point of access to the first geographical region, through at least the at least two secure first tunnels;
• the endpoint device automatically configuring a second virtual interface to provide the endpoint device a logical point of access to the second geographical region, through at least the at least two secure second tunnels;
• and
• for a particular traffic flow to be routed from the endpoint device toward a destination reachable in the second geographical region,
• evaluating a routing table comprising entries associated respectively each of the first and second virtual interfaces, to select the second virtual interface for that particular traffic flow, and
• based at least on selection of the second virtual interface, attributes of the particular traffic flow, and attributes of the at least two secure second tunnels, selecting a particular tunnel of the at least two secure second tunnels for forwarding that particular traffic flow.