Back to results
US 9,286,444 B2Granted
Next generation secure gateway
AssigneeVerizon Patent and Licensing Inc.
InventorsRicky L. Ogg, Joseph E. Hirschinger
Life of this patent
Estimating the term…
Abstract
A system includes a cloud-computing infrastructure to provide multitenant access from a public Internet Protocol (IP) network and multiple instances of a virtualized secure gateway operating on one or more physical devices within the cloud-computing infrastructure. The multiple instances of the virtualized secure gateway provide a point of entry to a private IP network. Each instance of the multiple instances of the virtualized secure gateway is configured to terminate multiple virtual private network (VPN) tunnels from a single customer accessing the private IP network via the public IP network, and each instance of the multiple instances of the virtualized secure gateway resides on a different processing core of the physical devices within the cloud-computing infrastructure.
Claims18
A system, comprising:
- cloud-computing infrastructure to provide multitenant access from a public Internet Protocol (IP) network, the cloud-computing infrastructure including one or more physical devices with multiple processing cores;
- and
- multiple instances of a virtual machine for providing secure gateway functionality without unique dedicated infrastructure build-outs, the multiple instances operating on the one or more physical devices, wherein each instance of the multiple instances of the virtual machine is dedicated to terminate multiple virtual private network (VPN) tunnels for a single customer, including a first VPN tunnel initiated by a client device having a dynamic IP address and a second VPN tunnel initiated by a gateway device in a customer network and having a static IP address,
- wherein each instance of the multiple instances of the virtual machine is executed on a different pair of processing cores of the one or more physical devices within the cloud-computing infrastructure, such that a first processing core of each pair of processing cores provides data plane processing for the single customer and a second processing core of each pair of processing cores provides control plane processing for the single customer, and
- wherein, for each pair of processing cores, an instance of the multiple instances of the virtual machine terminates VPN tunnels for hardware clients on one of the pair of processing cores and terminates VPN tunnels for software VPN clients on another one of the pair of processing cores.
2 more elements
A method, comprising:
- receiving, from a first network device, configuration information for customers of a private Internet Protocol (IP) network;
- reserving, in a cloud-computing infrastructure that provides multitenant access from a public IP network, processing resources for multiple instances of a virtual machine for providing secure gateway functionality without unique dedicated infrastructure build-outs, wherein each instance of the multiple instances is dedicated to terminate multiple virtual private network (VPN) tunnels for a single customer, including a first VPN tunnel initiated by a client device having a dynamic IP address and a second VPN tunnel initiated by a gateway device in a customer network and having a static IP address,
- wherein each instance of the multiple instances is executed on a different processing core pair of multiple processing cores in the cloud-computing infrastructure, such that a first processing core of each processing core pair provides data plane processing for the single customer and a second processing core of each processing core pair provides control plane processing for the single customer, and
- wherein, for each pair of processing cores, an instance of the multiple instances of the virtual machine terminates VPN tunnels for hardware clients on one of the pair of processing cores and terminates VPN tunnels for software VPN clients on another one of the pair of processing cores;
- establishing, using a first instance of the multiple instances of the virtual machine on a first processing core pair, a virtualized secure gateway for a first set of virtual private network (VPN) tunnels originating from one or more devices of a first customer using the public IP network;
- and
- establishing, using a second instance of the multiple instances of the virtual machine on a second processing core pair, a virtualized secure gateway for a second set of VPN tunnels originating from one or more devices of a second customer using the public IP network.
4 more elements
One or more devices, comprising:
- a memory to store a plurality of instructions;
- and
- one or more processors to execute instructions in the memory to:
- receive, from a network device, configuration information for multiple customers of a private Internet Protocol (IP) network;
- and
- reserve, in a cloud-computing infrastructure that provides multitenant access from a public IP network, processing resources for multiple instances of a virtual machine for providing secure gateway functionality without unique dedicated infrastructure build-outs,
- wherein each instance of the multiple instances is dedicated to terminate multiple virtual private network (VPN) tunnels for a customer, of the multiple customers, including a first VPN tunnel initiated by a client device having a dynamic IP address and a second VPN tunnel initiated by a gateway device in a customer network and having a static IP address,
- wherein each instance of the multiple instances resides on a different processing core pair of the cloud-computing infrastructure, such that a first processing core of each instance provides data plane processing for the customer and a second processing core of each instance provides control plane processing for the customer, and
- wherein, for each pair of processing cores, an instance of the multiple instances of the virtual machine terminates VPN tunnels for hardware clients on one of the pair of processing cores and terminates VPN tunnels for software VPN clients on another one of the pair of processing cores.
6 more elements
Dependencies are inferred from the claim text.