# US 2018/0026877 A1 · Systems and methods for providing secure network exchanged for a multitenant virtual private cloud > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0026877 A1 - Document ID: US20180026877A1 - Status: Published application - Kind: A1 - Application number: 15/425,934 - Filed: 2017-02-06 - Published: 2018-01-25 - Earliest claimed: 2016-02-04 - Assignees: Twilio Inc. - Applicants: Twilio, Inc. - Inventors: Andriy Mysyk - Web page: https://patentgrep.com/patent/US20180026877A1 ## CPC - H04L 45/3065: {for real time traffic} - H04L 45/04: {Interdomain routing, e.g. hierarchical routing} - H04L 51/04: Real-time or near real-time messaging, e.g. instant messaging [IM] - H04L 61/2514: between local and global IP addresses - H04L 61/2567: for reachability, e.g. inquiring the address of a correspondent behind a NAT server - H04L 61/5007: Internet protocol [IP] addresses - H04L 63/0272: {Virtual private networks} - H04L 45/50: using label swapping, e.g. multi-protocol label switch [MPLS] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods for routing real-time voice communication via a private network exchange. A virtual private cloud (VPC) system receives first configuration for a first private network exchange for a first account of the VPC system. The VPC system assigns a first regional exchange system to the first private network exchange based on the first configuration. The first private network exchange is established between the first regional exchange system and a first outside entity system of the first account by mapping an identifier of the first account to the first private network exchange. Real-time voice communication data for the first account is routed from a first real-time voice communication service of the VPC system to the first outside entity system via the first private network exchange based on the mapping. ## Claims ### Claim 1 A method comprising: setting configuration of a first account comprising: a virtual private cloud (VPC) system receiving first configuration for a first private network exchange for the first account of the VPC system; and the VPC system assigning a first regional exchange system to the first private network exchange based on the first configuration; establishing the first private network exchange between the first regional exchange system and a first outside entity system of the first account comprising: mapping an identifier of the first account to the first private network exchange; routing traffic through the regional exchange system comprising: routing real-time voice communication data for the first account from a first real-time voice communication service of the VPC system to the first outside entity system via the first private network exchange based on the mapping. ### Claim 2 (depends on 1) The method of claim 1, wherein the VPC system receives the first configuration via a public Internet connection, and wherein the first account is an account of a first multi-tenant platform system of a first VPC of the VPC system, and wherein the first service is a service of the first multi-tenant platform system. ### Claim 3 (depends on 1) The method of claim 1, wherein assigning the first regional exchange comprises assigning an IP address within a subnet of the first regional exchange system to the first private network exchange. ### Claim 4 (depends on 1) The method of claim 1, wherein the first regional exchange system is communicatively coupled to the VPC system via a private network connection. ### Claim 5 (depends on 1) The method of claim 1, wherein the first configuration specifies a type of a plurality of types of private network exchanges, and the first private network exchange is of the specified type. ### Claim 6 (depends on 1) The method of claim 1, wherein the first regional exchange system maps the identifier of the first account to the first private network exchange. ### Claim 7 (depends on 1) The method of claim 1, wherein the identifier of the first account is an IP address assigned to the first account for the first private network exchange. ### Claim 8 (depends on 1) The method of claim 1, wherein the identifier for the first account is associated with the first account at the VPC system, and wherein the identifier for the first account is associated with the first private network exchange at the first regional exchange system. ### Claim 9 (depends on 1) The method of claim 1, wherein the first account is an account of a customer entity, and wherein the first outside entity system is a customer system. ### Claim 10 (depends on 1) The method of claim 1, wherein the first account is an account of a service provider, and wherein the first outside entity system is a service provider system. ### Claim 11 (depends on 1) The method of claim 1, wherein routing traffic through the regional exchange system further comprises: routing communication data for the first account from the first outside entity system to the first service of the VPC system via the first private network exchange by performing IP translation between a public IP address of the first service used by the first outside entity system and a private IP address of the first service used within the VPC system. ### Claim 12 (depends on 1) The method of claim 1, wherein communication data routed from the first outside entity system to the first service via the regional exchange system includes information identifying the first account, wherein the information identifying the first account includes an IP address assigned to the first account by the VPC system. ### Claim 13 (depends on 1) The method of claim 1, wherein mapping an identifier of the first account to the first private network exchange comprises: the first regional exchange system receiving the identifier and mapping the received identifier of the first account to the first private network exchange. ### Claim 14 (depends on 13) The method of claim 13, wherein the first regional exchange system receives the identifier from the VPC system. ### Claim 15 (depends on 13) The method of claim 13, wherein the first regional exchange system receives the identifier from an outside system of the first account. ### Claim 16 (depends on 1) The method of claim 1, wherein the first regional exchange system includes interfaces for a plurality of types of private network exchange connections. ### Claim 17 (depends on 1) The method of claim 1, wherein routing communication data for the first account from a first service of the VPC system to the first outside entity system via the first private network exchange based on the mapping comprises: the VPC system providing the communication data of the first service to the first regional exchange system responsive to a determination that a destination endpoint identified by the communication data is authorized to receive the communication data via the first private network exchange. ### Claim 18 (depends on 1) The method of claim 1, wherein routing communication data for the first account from a first service of the VPC system to the first outside entity system via the first private network exchange based on the mapping comprises: the VPC system providing the communication data of the first service to the first regional exchange system responsive to a determination that a source endpoint identified by the communication data is authorized to provide the communication data via the first private network exchange. ### Claim 19 A method comprising: setting configuration of a first account comprising: a virtual private cloud (VPC) system receiving first configuration for a first private network exchange for the first account of the VPC system; and the VPC system assigning a first regional exchange system to the first private network exchange based on the first configuration; establishing the first private network exchange between the first regional exchange system and a first outside entity system of the first account comprising: mapping an identifier of the first account to the first private network exchange; routing traffic through the regional exchange system comprising: routing communication data for the first account from a first service of the VPC system to the first outside entity system via the first private network exchange based on the mapping. ### Claim 20 A method comprising: setting configuration of a first account comprising: a virtual private cloud (VPC) system receiving first configuration for a first private network exchange for the first account of the VPC system; and the VPC system assigning a first regional exchange system to the first private network exchange based on the first configuration; establishing the first private network exchange between the first regional exchange system and a first outside entity system of the first account comprising: mapping an identifier of the first account to the first private network exchange; routing traffic through the regional exchange system comprising: routing messaging communication data for the first account from a first messaging communication service of the VPC system to the first outside entity system via the first private network exchange based on the mapping.