Elastic outbound gateway
AssigneeSophos Limited
InventorVincent Maurice Landgraf
Life of this patent
Estimating the term…
Abstract
In general, in an aspect, a method for providing an outbound gateway protection includes provisioning one or more worker gateways located in a first gateway virtual private cloud, the one or more worker gateways sharing configuration data with the controller gateway, provisioning one or more load balancer gateways in one or more client virtual clouds, the one or more client virtual clouds each comprising one or more clients, the one or more load balancer gateways distributing client requests among the worker gateways, assigning groups of the one or more clients to one of the one or more load balancer gateways based on requests from a majority of the worker gateways, and communicating outbound network traffic from the clients via the assigned load balancer gateways.
Claims20
A method for providing an outbound gateway system, comprising:
- provisioning one or more worker gateways located in a first gateway virtual private cloud, the one or more worker gateways receiving configuration data from a controller gateway;
- provisioning one or more load balancer gateways in one or more client virtual clouds, the one or more client virtual clouds each comprising one or more clients, the one or more load balancer gateways distributing client requests among the worker gateways;
- assigning groups of the one or more clients to one of the one or more load balancer gateways based on requests from a majority of the worker gateways;
- and
- communicating outbound network traffic from the clients via the assigned load balancer gateways.
A network protection system, comprising:
- one or more worker gateways provisioned in a first gateway virtual private cloud;
- and
- one or more client virtual clouds comprising one or more clients and one or more load balancer gateways, wherein client subnets are assigned to one of the load balancer gateways by a vote of the worker gateways, and each load balancer gateway that is assigned to a client subnet distributes traffic from the client subnet among the worker gateways.
A system for cloud network protection, comprising:
- a non-transitory computer-readable medium comprising a template for a worker gateway deployable in a first virtual private cloud and configurable to receive outbound network traffic;
- and
- a non-transitory computer-readable medium comprising a template for a load balancer gateway deployable in a second virtual private cloud different from the first virtual private cloud, the load balancer gateway configurable to be assigned to one or more client subnets in the second virtual private cloud, wherein the load balancer gateway is assigned to a client subnet gateway by requests of worker gateways.
Dependencies are inferred from the claim text.