US 12,563,016 B2Granted

Building a mesh virtual private network (VPN) in a hybrid or multi-cloud cluster

AssigneeSidero Labs, Inc.

InventorSeán McCord

Life of this patent

Estimating the term…

Loading patent…

Abstract

Devices, system and methods build a mesh virtual private network (VPN) in a hybrid cloud cluster having a private and a public cloud with connected network nodes. Each node has an operating system (OS) to discover nodes of the VPN by determining IP addresses and port addresses of the nodes from data received from discovery agents. An internal discovery agent of each of the nodes determines IP addresses and port addresses of the nodes. A node discovery agent located within a node determines IP addresses and port addresses of other nodes. An external discovery agent located outside the cluster determines IP addresses and port addresses of nodes. A VPN configuration data generator of the OS generates VPN configuration data of the clouds using the IP addresses and port addresses. A VPN builder of the OS builds a configuration of the VPN of the hybrid cluster using the VPN configuration data.

Claims26

Dependent claims

A system for building a mesh virtual private network (VPN) in a cloud cluster, the system comprising:

the cloud cluster including first network nodes in a private cloud connected with second network nodes of a public cloud;
at least one of the first network nodes and the second network nodes having a respective operating system including a VPN node discovery controller having:
a VPN node configuration data controller configured to discover nodes of the VPN by determining IP addresses and port addresses of the first network nodes and the second network nodes from discovery agents including:
an internal discovery agent of at least one of the first network nodes and the second network nodes that includes a Kubernetes API and that uses an annotation-marked Kubernetes node resource to determine IP addresses and port addresses of some of the first network nodes and the second network nodes;
a node discovery agent located within a node of the first network nodes and the second network nodes that includes a Kubernetes API and that determine IP addresses and port addresses of other nodes of the first network nodes and the second network nodes;
and
an external discovery agent located outside the cloud cluster that includes a Kubernetes API and that determines IP addresses and port addresses of a least of the first network nodes and the second network nodes;
and
at least one of:
a VPN configuration data generator configured to generate VPN configuration data for at least one VPN node of the first network nodes and at least one VPN node of the second network nodes using the determined IP addresses and port addresses;
or
a VPN builder configured to build a configuration of the VPN of the hybrid or multi-cloud cluster for the VPN nodes using the VPN configuration data.

9 more elements

A method for building a mesh virtual private network (VPN) in a cloud cluster including first network nodes in a private cloud connected with second network nodes of a public cloud, the method comprising:

at least one of the first network nodes and the second network nodes:
discovering nodes of the VPN by determining total VPN node configuration data of the first network nodes and the second network nodes from portions of the VPN node configuration data received from discovery agents including:
an internal discovery agent of at least one of the first network nodes and the second network nodes that includes a Kubernetes API and that is for determining a portion of VPN node configuration data of some of the first network nodes and the second network nodes;
a node discovery agent located within a node of the first network nodes and the second network nodes that includes a Kubernetes API, and that is for determining a portion of VPN node configuration data of other nodes of the first network nodes and the second network nodes;
and
an external discovery agent located outside the cloud cluster that includes a Kubernetes API, and that is for determining a portion of VPN node configuration data of at least some nodes of the first network nodes and the second network nodes;
and
at least one of:
generating VPN configuration data for at least one VPN node of the first network nodes and at least one VPN node of the second network nodes using the total VPN node configuration data;
or
building a configuration of the VPN of the hybrid or multi-cloud cluster for the VPN nodes using the generated VPN configuration data.

8 more elements

A non-volatile machine readable medium storing a program having instructions which when executed by a processor will cause the processor to build a mesh virtual private network (VPN) in a cloud cluster including a private cloud having a first network nodes connected to a second network nodes of a public cloud, the instructions of the program for:

discovering nodes of the VPN by determining total VPN node configuration data of the first network nodes and the second network nodes from portions of the VPN node configuration data received from discovery agents including:
an internal discovery agent of at least one of the first network nodes and the second network nodes that includes a Kubernetes API, and that is for determining a portion of VPN node configuration data of some of the first network nodes and the second network nodes;
a node discovery agent located within a node of the first network nodes and the second network nodes which includes a Kubernetes API, and that is for determining a portion of VPN node configuration data of other nodes of the first network nodes and the second network nodes;
and
an external discovery agent located outside the Kubernetes cluster that includes a Kubernetes API, and that is for determining a portion of VPN node configuration data of at least some nodes of the first network nodes and the second network nodes;
and
at least one of:
generating VPN configuration data for at least one VPN node of the first network nodes and at least one VPN node of the second network nodes using the total VPN node configuration data;
or
building a configuration of the VPN of the hybrid or multi-cloud cluster for the VPN nodes using the generated VPN configuration data.

7 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/639,797Filed 18 Apr 2024 · continuation
Priority: 7 Feb 2022
Published: US 2025/0373584 A14 Dec 2025
Granted: 24 Feb 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification16 codes

H04L 63/0272
For separating internal from external traffic, e.g. firewalls: virtual private networks
H04L 12/4641
Interconnection of networks: virtual LANs, VLANs, e.g. virtual private networks [VPN]
H04L 12/4679
Dynamic sharing of VLAN information amongst network nodes: arrangements for the registration or de-registration of VLAN attribute values, e.g.…
H04L 41/046
Network management architectures or arrangements: comprising network management agents or mobile agents therefor

Family

Application17/666,232Parent of this continuation · filed 7 Feb 2022
US 2025/0373584 A1Pre-grant publication · published 4 Dec 2025
US 11,968,180 B2Parent of this continuation
US 2023/0254284 A1Published application
US 12,563,016 B2This patent

From the US filing history. Foreign family members aren’t listed.