Method and apparatus for metadata conversion with a flow identifier of a packet sequence in a tunnel-less sdwan

A non-transitory computer-readable storage medium containing program instructions, which when executed by the computer cause the computer to perform operations comprising:

• receiving a sequence of packets from a first client at a first hub, the sequence of packets each having a same flow;
• facilitating a secure tunnel between the first hub and a second hub;
• assigning a flow identifier to the sequence of packets;
• converting fields from a header of the packet to a metadata supplement to the packet to form a reduced packet;
• encapsulating the reduced packet in a wrapper that includes the flow identifier;
• and
• sending the packet of the sequence of packets from the first hub to the second hub through the secure tunnel.

A network node comprising:

• a communications interface configured to receive a sequence of packets from a first client at the network node, the sequence of packets each having a same flow;
• a session management module configured to facilitate a secure tunnel and an associated session between the network node and the hub;
• and
• a processor configured to assign a flow identifier to the sequence of packets, to convert fields from a header of the packet to a metadata supplement to the packet to form a reduced packet, and to encapsulate the reduced packet in a wrapper that includes the flow identifier,
• wherein the communications interface is further to send the packet of the sequence of packets from the network node to the hub through the secure tunnel.