# US 2022/0045985 A1 · Scalable and on-demand multi-tenant and multi region secure network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2022/0045985 A1 - Document ID: US20220045985A1 - Status: Published application - Kind: A1 - Application number: 16/988,777 - Filed: 2020-08-10 - Published: 2022-02-10 - Earliest claimed: 2020-08-10 - Assignees: Perimeter 81 LTD - Applicants: Perimeter 81 LTD - Inventors: Amit BAREKET; Sagi GIDALI - Web page: https://patentgrep.com/patent/US20220045985A1 ## CPC - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 12/66: Arrangements for connecting between networks having differing types of switching systems, e.g. gateways - H04L 45/04: {Interdomain routing, e.g. hierarchical routing} - H04L 45/74: Address processing for routing - H04L 47/78: Architectures of resource allocation - H04L 47/82: {Miscellaneous aspects} - H04L 61/5007: Internet protocol [IP] addresses - H04L 61/5046: Resolving address allocation conflicts; Testing of addresses (testing when self-assigning an address H04L61/5092) - H04L 63/0272: {Virtual private networks} - H04L 63/029: {Firewall traversal, e.g. tunnelling or, creating pinholes} - H04L 2101/668: Internet protocol [IP] address subnets - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Provided herein are systems and methods for configuring a segmented cloud based network based on separate Internet Protocol (IP) segments, comprising receiving instructions to create one or more additional private virtual networks as respective additional segments in a multi-tenant multi-regional cloud based network segmented to a plurality of segments each mapped by a respective IP address range, calculating one or more non-conflicting new IP address range based on analysis of the IP address range of each of the segments, allocating a respective new IP address range to each additional segment, and deploying automatically one or more gateways. The gateways are configured to connect one or more client devices to the additional segments) by assigning each client device an IP address in the respective new IP address range and routing network packets between the client devices and the respective additional segment according to mapping of the respective new IP address range. ## Claims ### Claim 1 A system for configuring a segmented cloud based network based on separate Internet Protocol (IP) segments, comprising: at least one processor configured to: receive instructions to create at least one additional private virtual network as a respective additional segment in at least one multi-tenant multi-regional cloud based network which is segmented to a plurality of segments each mapped by a respective IP address range; calculate a non-conflicting new IP address range based on analysis of the IP address range of each of the plurality of segments of the at least one cloud based network; allocate the new IP address range to the respective additional segment; and deploy automatically at least one gateway configured to connect at least one of a plurality of client devices to the respective additional segment by assigning the at least one client device an IP address in the new IP address range and routing network packets between the at least one client device and the respective additional segment according to mapping of the new IP address range. ### Claim 2 (depends on 1) The system of claim 1, wherein the at least one gateway is configured to apply Layer 2 (L2) routing to route the network packets between the at least one client device and the respective additional segment. ### Claim 3 (depends on 1) The system of claim 1, wherein the at least one gateway is configured to apply Layer 3 (L3) routing to route the network packets between the at least one client device and the respective additional segment. ### Claim 4 (depends on 1) The system of claim 1, wherein at least one of the plurality of segments is further segmented to a plurality of subnets using Classless Inter-Domain Routing (CIDR). ### Claim 5 (depends on 1) The system of claim 1, wherein at least one of the plurality of segments is further segmented to a plurality of subnets using at least one firewall configured to route network traffic within the at least one segment according to at least one routing table. ### Claim 6 (depends on 1) The system of claim 1, wherein a plurality of gateways are deployed to provide connectivity to at least one of the plurality of segments for a plurality of client devices located at a plurality of geographical regions. ### Claim 7 (depends on 6) The system of claim 6, wherein each of the plurality of gateways is deployed in at least one respective edge server connected at an edge of the network in a respective one of the plurality of geographical regions in close network proximity to a respective access point providing network connectivity to the client devices located in the respective geographical region. ### Claim 8 (depends on 7) The system of claim 7, wherein the plurality of gateways providing connectivity to the at least one segment for client devices located in the plurality of geographical regions are interconnected via at least one site to site secure connection. ### Claim 9 (depends on 1) The system of claim 1, wherein the at least one processor is further configured to deploy automatically at least one additional gateway according to at least one predefined rule in response to a request received from at least one additional client device to connect to at least one of the plurality of segments. ### Claim 10 (depends on 9) The system of claim 9, wherein the at least one additional gateway is configured to connect the at least one additional client device to the at least one segment by assigning the at least one additional client device an IP address in the IP address range of the at least one segment and routing network packets between the at least one additional client device and the at least one segment according to the mapping of the IP address range allocated to the at least one segment. ### Claim 11 (depends on 9) The system of claim 9, wherein the at least one additional gateway is deployed in at least one of a plurality of geographical regions supported by the at least one cloud based network in which the at least one additional client device is located. ### Claim 12 A computer implemented method of configuring a segmented cloud based network based on separate Internet Protocol (IP) segments, comprising: using at least one processor configured for: receiving instructions to create at least one additional private virtual network as a respective additional segment in at least one multi-tenant multi-regional cloud based network which is segmented to a plurality of segments each mapped by a respective IP address range; calculating a non-conflicting new IP address range based on analysis of the IP address range of each of the plurality of segments of the at least one cloud based network; allocating the new IP address range to the respective additional segment; and deploying automatically at least one gateway configured to connect at least one of a plurality of client devices to the respective additional segment by assigning the at least one client device an IP address in the new IP address range and routing network packets between the at least one client device and the respective additional segment according to mapping of the new IP address range. ### Claim 13 (depends on 12) A computer program with a program code for performing a method according to claim 12, when the computer program runs on a computing device.