Secure cloud fabric to connect subnets in different network domains
AssigneeZentera Systems, Inc.
InventorJaushin Lee
Life of this patent
Estimating the term…
Abstract
A secure virtual network platform connects two or more subnets in different or separate network domains. The secure virtual network can use the under layer physical networks in various domains as an IP forwarding fabric without changing any existing firewalls, security settings, or network topology. A first type of connection across the virtual network involves connecting server groups. A second type of connection across the virtual network involves connecting a server group to a physical network. A third type of connection across the virtual network involves connecting a physical network to another physical network.
Claims20
A method for using a wide area network (WAN) virtual network platform to connect first and second network domains that are physically segregated from each other by firewalls and managed by different network administration parties comprising:
- prompting a user to select a first server group within the first network domain, the first server group being associated with a first virtual subnet;
- prompting the user to select a second server group within the second network domain, remote from the first network domain;
- mapping the first virtual subnet of the first server group to a first virtual forwarding subnet representing the second server group;
- and
- forwarding a first communication from the first network domain to the second network domain, wherein a forwarding path of the first communication is from the first server group to the first virtual forwarding subnet, through the WAN virtual network platform, and to the second server group.
A method comprising:
- identifying a first virtual subnet associated with a first server group in a first network domain;
- providing a first virtual gateway coupled to a first physical subnet in a second network domain, remote from the first network domain;
- mapping the first virtual subnet to a first virtual forwarding subnet;
- and
- forwarding a first communication from the first network domain to the second network domain, wherein a forwarding path of the first communication is from the first virtual subnet to the first virtual forwarding subnet to a first physical forwarding subnet associated with the first virtual gateway to the first physical subnet in the second network domain.
A method comprising:
- providing a first virtual gateway coupled to a first physical subnet in a first network domain;
- providing a second virtual gateway coupled to a second physical subnet in a second network domain;
- prompting a user to specify a first physical forwarding subnet to be associated with the first virtual gateway, the first physical forwarding subnet being routable to the first physical subnet;
- receiving the specified first physical forwarding subnet;
- storing at the first virtual gateway first information mapping the first physical forwarding subnet to the second virtual gateway;
- receiving at the first physical forwarding subnet a first communication from the first physical resource subnet;
- and
- forwarding, using the first information, the first communication to the second virtual gateway for the second virtual gateway to forward to the second physical subnet.
Dependencies are inferred from the claim text.