Agent-less network traffic inspection using an overlay network
AssigneeShieldX Networks, Inc.
InventorsManuel Nedbal, Ratinder Paul Singh Ahuja, John Richard Guzik
Life of this patent
Estimating the term…
Abstract
Systems, methods, and apparatuses enable agent-less network traffic interception using an overlay network. The system creates an inspection namespace on a server computer and clones namespace properties of a default namespace on the server computer to the inspection namespace. The system creates an overlay network in the inspection namespace connecting the server computer to a security service. The system creates a namespace bridge between the default namespace and the inspection namespace to pass server traffic between the namespaces. The system then transmits server traffic to the security service using the overlay network and an encapsulation protocol.
Claims27
A computer-implemented method comprising:
- creating, by a server computer, an inspection namespace on the server computer;
- cloning namespace properties of a default namespace on the server computer to the inspection namespace;
- creating an overlay network in the inspection namespace connecting the server computer to a security service;
- creating a namespace bridge between the default namespace and the inspection namespace;
- and
- transmitting server traffic received via the namespace bridge to the security service using the overlay network and an encapsulation protocol, wherein the security service performs security processing on the server traffic.
One or more non-transitory computer-readable storage media storing instructions which, when executed by one or more hardware processors, cause performance of a method comprising:
- creating, by a server computer, an inspection namespace on the server computer;
- cloning namespace properties of a default namespace on the server computer to the inspection namespace;
- creating an overlay network in the inspection namespace connecting the server computer to a security service;
- creating a namespace bridge between the default namespace and the inspection namespace;
- and
- transmitting server traffic received via the namespace bridge to the security service using the overlay network and an encapsulation protocol, wherein the security service performs security processing on the server traffic.
An apparatus comprising:
- one or more hardware processors;
- memory coupled to the one or more hardware processors, the memory storing instructions which, when executed by the one or more hardware processors, causes the apparatus to:
- create an inspection namespace on a server computer;
- clone namespace properties of a default namespace on the server computer to the inspection namespace;
- create an overlay network in the inspection namespace connecting the server computer to a security service;
- create a namespace bridge between the default namespace and the inspection namespace;
- and
- transmit server traffic received via the namespace bridge to the security service using the overlay network and an encapsulation protocol, wherein the security service performs security processing on the server traffic.
A computer-implemented method comprising:
- identifying an inspection namespace for a server computer;
- deploying a security service in the inspection namespace;
- creating an overlay network in the inspection namespace, the overlay network configured to encapsulate and transmit server traffic between the security service and a source of the server traffic;
- receiving encapsulated server traffic via the overlay network, the encapsulated server traffic originating from a first namespace in the source of the server traffic, and the first namespace receiving the server traffic from a second namespace in the source of the server traffic;
- decapsulating the received encapsulated server traffic;
- and
- performing security processes on the decapsulated server traffic.
One or more non-transitory computer-readable storage media storing instructions which, when executed by one or more hardware processors, cause performance of a method comprising:
- identifying an inspection namespace for a server computer;
- deploying a security service in the inspection namespace;
- creating an overlay network in the inspection namespace, the overlay network configured to encapsulate and transmit server traffic between the security service and a source of the server traffic;
- receiving encapsulated server traffic via the overlay network, the encapsulated server traffic originating from a first namespace in the source of the server traffic, and the first namespace receiving the server traffic from a second namespace in the source of the server traffic;
- decapsulating the received encapsulated server traffic;
- and
- performing security processes on the decapsulated server traffic.
An apparatus comprising:
- one or more hardware processors;
- memory coupled to the one or more hardware processors, the memory storing instructions which, when executed by the one or more hardware processors, causes the apparatus to:
- identify an inspection namespace for a server computer;
- deploy a security service in the inspection namespace;
- create an overlay network in the inspection namespace, the overlay network configured to encapsulate and transmit server traffic between the security service and a source of the server traffic;
- receive encapsulated server traffic via the overlay network, the encapsulated server traffic originating from a first namespace in the source of the server traffic, and the first namespace receiving the server traffic from a second namespace in the source of the server traffic;
- decapsulate the received encapsulated server traffic;
- and
- perform security processes on the decapsulated server traffic.
Dependencies are inferred from the claim text.