Overlay network infrastructure

An overlay network comprising:

• a plurality of transparent access points (TAPs), wherein each TAP is communicably coupled between one or more clients and servers and a wide area network (WAN) to enable the one or more clients to communicate with the one or more servers, and is coupled to other of the plurality of TAPs via permanently, established secure links;
• a controller coupled to each of the plurality of TAPs via a secure connection to configure the plurality of TAPs with information to enable said each TAP to know what services are available and from which of the plurality of TAPs each of the services can be accessed, during configuration, the administrator of the TAP and the controller cross-verify each other using the fingerprint of the TAP'S and controller's certificate.

An overlay network comprising:

• a plurality of transparent access points (TAPs), wherein each TAP is communicably coupled between one or more clients and servers and a wide area network (WAN) to enable the one or more clients to communicate with the one or more servers, and is coupled to other of the plurality of TAPs via permanently, established secure links;
• a controller coupled to each of the plurality of TAPs via a secure connection to configure the plurality of TAPs with information to enable said each TAP to know what services are available and from which of the plurality of TAPs each of the services can be accessed, wherein at least one of the plurality of TAPs performs dictionary-based compression on at least one request or response prior to sending the least one request or response over the WAN to a receiving TAP of the plurality of TAPs, the dictionary-based compression replacing at least a portion of the at least one request or response with an index.

An overlay network comprising:

• a plurality of transparent access points (TAPs), wherein each TAP is communicably coupled between one or more clients and servers and a wide area network (WAN) to enable the one or more clients to communicate with the one or more servers, and is coupled to other of the plurality of TAPs via permanently, established secure links;
• a controller coupled to each of the plurality of TAPs via a secure connection to configure the plurality of TAPs with information to enable said each TAP to know what services are available and from which of the plurality of TAPs each of the services can be accessed, wherein one TAP of the plurality of TAPS receives a request for a designated server from one of the clients and checks a cache to determine whether a response to the request is already stored in the cache, the one TAP sending the response from the cache to satisfy the request, instead of sending the response over the WAN toward the designated server.

A method comprising:

• configuring a plurality of transparent access points (TAPs), using a controller, to enable the one or more clients to communicate with the one or more servers over a wide area network (WAN), where each TAP is communicably coupled between the one or more clients and servers and is coupled to other of the plurality of TAPs via permanently, established secure links, and further wherein the controller is coupled to each of the plurality of TAPs via a secure connection, including providing information to enable said each TAP to know what services are available and from which of the plurality of TAPS each of the services can be accessed, and providing each TAP with routing and forwarding tables to indicate where one or more services are available, to specify one or more TAPs to which a service will be forwarded, and to indicate how to reach TAPs wherein the service is available.

A method comprising:

• configuring a plurality of transparent access points (TAPs), using a controller, to enable the one or more clients to communicate with the one or more servers over a wide area network (WAN), where each TAP is communicably coupled between the one or more clients and servers and is coupled to other of the plurality of TAPs via permanently, established secure links, and further wherein the controller is coupled to each of the plurality of TAPs via a secure connection, including providing information to enable said each TAP to know what services are available and from which of the plurality of TAPS each of the services can be accessed, the administrator of the TAP and the controller cross-verifying each other using the fingerprint of the TAP's and controller's certificate during configuration.

A method comprising:

• configuring a plurality of transparent access points (TAPs), using a controller, to enable the one or more clients to communicate with the one or more servers over a wide area network (WAN), where each TAP is communicably coupled between the one or more clients and servers and is coupled to other of the plurality of TAPs via permanently, established secure links, and further wherein the controller is coupled to each of the plurality of TAPs via a secure connection, including providing information to enable said each TAP to know what services are available and from which of the plurality of TAPS each of the services can be accessed, at least one of the plurality of TAPs performing dictionary-based compression on at least one request or response and then sending the least one request or response over the WAN to a receiving TAP of the plurality of TAPs, the dictionary-based compression replacing at least a portion of the at least one request or response with an index.

A method comprising:

• configuring a plurality of transparent access points (TAPs), using a controller, to enable the one or more clients to communicate with the one or more servers over a wide area network (WAN), where each TAP is communicably coupled between the one or more clients and servers and is coupled to other of the plurality of TAPs via permanently, established secure links, and further wherein the controller is coupled to each of the plurality of TAPs via a secure connection, including providing information to enable said each TAP to know what services are available and from which of the plurality of TAPS each of the services can be accessed, one TAP of the plurality of TAPs receiving a request for a designated server from one of the clients and checks a cache to determine whether a response to the request is already stored in the cache, the one TAP sending the response from the cache to satisfy the request, instead of sending the response over the WAN toward the designated server.