A multi-tenant virtual private network based on an overlay network

An apparatus comprising:

• at least one processor;
• and
• at least one memory including computer program code;
• the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to perform:
• relaying data packets between a virtual private network (VPN) tunnel that connects the apparatus to a remote network of a tenant and an overlay network service that implements the VPN for the tenant within a data center,
• wherein the data packets between the apparatus and the overlay network service are carried in a virtual local area network (VLAN) assigned for the tenant, and
• wherein the apparatus stores a multi-tenant forwarding table that stores a mapping between the tenant and the VLAN assigned for the tenant of a plurality of tenants.

A system comprising:

• an apparatus configured to relay data packets between a VPN tunnel that connects the apparatus to a remote network of a tenant and an overlay network service that implements the VPN for the tenant within the data center,
• wherein the data packets between the apparatus and the overlay network service are carried in a virtual local area network (VLAN) assigned for the tenant,
• wherein the apparatus stores a multi-tenant forwarding table that stores a mapping between the tenant and the VLAN assigned for the tenant for a plurality of tenants;
• and
• a VLAN gateway for interfacing the overlay network service within the data center in dependence of the VLAN employed in transfer of data packets between the apparatus and the overlay network service,
• wherein the VLAN gateway is configured to store an overlay network mapping table that stores a mapping between the VLAN and the overlay network of a plurality of VLANs.