Controller-enabled discovery of SD-WAN edge devices

A non-transitory computer-readable storage medium for use in conjunction with a computer system, the computer-readable storage medium storing program instructions that, when executed by the computer system, cause the computer system to perform operations comprising:

• establishing a connection with an electronic device in a network, wherein the electronic device is behind a firewall that provides security for the electronic device;
• receiving a packet associated with the electronic device, wherein the packet comprises an Internet Protocol (IP) address of the electronic device and is associated with a port in the firewall, and the IP address and the port are private;
• providing, to the port, a response addressed to the IP address;
• receiving an acknowledgment associated with the electronic device that indicates that the response was received;
• providing, addressed to the electronic device, a second IP address of a second electronic device and a second port in a second firewall, wherein the second electronic device is behind the second firewall, wherein the second firewall provides security for the second electronic device, and wherein the second IP address and the second port are private;
• providing, addressed to the second electronic device, the IP address of the electronic device and the port in the firewall associated with the electronic device;
• providing, to the port, an instruction addressed to the IP address to establish a tunnel with the second electronic device;
• and
• providing, to the second port, a second instruction addressed to the second IP address to establish the tunnel with the electronic device, wherein the computer system facilitates discovery and secure communication between the electronic device and the second electronic device through the firewall and the second firewall, wherein communication between the computer system and the electronic device uses Hypertext Transfer Protocol Secure (HTTPS), and
• wherein the computer system is different from the firewall and the second firewall, the electronic device is different from the firewall, and the second electronic device is different from the second firewall.

A method for facilitating discovery of electronic devices in a network, comprising:

• by a computer system:
• establishing a connection with an electronic device in the network, wherein the electronic device is behind a firewall that provides security for the electronic device;
• receiving a packet associated with the electronic device, wherein the packet comprises an Internet Protocol (IP) address of the electronic device and is associated with a port in the firewall, and the IP address and the port are private;
• providing, to the port, a response addressed to the IP address;
• receiving an acknowledgment associated with the electronic device that indicates that the response was received;
• providing, addressed to the electronic device, a second IP address of a second electronic device and a second port in a second firewall, wherein the second electronic device is behind the second firewall, wherein the second firewall provides security for the second electronic device, and wherein the second IP address and the second port are private;
• providing, addressed to the second electronic device, the IP address of the electronic device and the port in the firewall associated with the electronic device;
• providing, to the port, an instruction addressed to the IP address to establish a tunnel with the second electronic device;
• and
• providing, to the second port, a second instruction addressed to the second IP address to establish the tunnel with the electronic device, wherein the computer system facilitates the discovery and secure communication between the electronic device and the second electronic device through the firewall and the second firewall, wherein communication between the computer system and the electronic device uses Hypertext Transfer Protocol Secure (HTTPS), and
• wherein the computer system is different from the firewall and the second firewall, the electronic device is different from the firewall, and the second electronic device is different from the second firewall.