Load balancing secure network traffic
AssigneePalo Alto Networks, Inc.
InventorsPankaj Bhagra, Aniket Ghule, Srinivasan Komandoor Santhanam, Arivu Mani Ramasamy
Life of this patent
Estimating the term…
Abstract
Techniques for load balancing secure network traffic are disclosed. A system, process, and/or computer program product for load balancing secure network traffic includes monitoring network traffic for each of a plurality of branches for an enterprise network, and performing load balancing for the plurality of monitored branches to a plurality of security processing nodes (SPNs) executing in a cloud-based security service using a network load balancer (NLB) in communication with a plurality of Network Processing Nodes (NPNs), the plurality of monitored branches being distributed to the plurality of SPNs via a plurality of tunnels.
Claims20
A system, comprising:
- a processor configured to:
- monitor network traffic for each of a plurality of branches for an enterprise network, wherein each branch of the plurality of branches supports a non-overlapping portion of a prefix;
- and
- perform load balancing for the plurality of monitored branches to a plurality of security processing nodes (SPNs) executing in a cloud-based security service using a network load balancer (NLB) in communication with a plurality of Network Processing Nodes (NPNs), wherein the plurality of monitored branches are distributed to the plurality of SPNs via a plurality of tunnels, wherein the performing of the load balancing is based on a subnet mask of the prefix;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- monitoring, using a processor, network traffic for each of a plurality of branches for an enterprise network, wherein each branch of the plurality of branches supports a non-overlapping portion of a prefix;
- and
- performing, using the processor, load balancing for the plurality of monitored branches to a plurality of security processing nodes (SPNs) executing in a cloud-based security service using a network load balancer (NLB) in communication with a plurality of Network Processing Nodes (NPNs), wherein the plurality of monitored branches are distributed to the plurality of SPNs via a plurality of tunnels, wherein the performing of the load balancing is based on a subnet mask of the prefix.
A system, comprising:
- a processor configured to:
- monitor network traffic for each of a plurality of branches for an enterprise network, wherein each branch of the plurality of branches supports a non-overlapping portion of a prefix;
- and
- means for performing load balancing for the plurality of monitored branches to a plurality of security processing nodes (SPNs) executing in a cloud-based security service using a network load balancer (NLB) in communication with a plurality of Network Processing Nodes (NPNs), wherein the plurality of monitored branches are distributed to the plurality of SPNs via a plurality of tunnels, wherein the performing of the load balancing is based on a subnet mask of the prefix;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
Dependencies are inferred from the claim text.