Path selection in a multi-service and multi-tenant secure cloud environment

A method comprising:

• receiving, by a processor, an initial data packet that is part of a data transfer between a server and a client;
• determining, by the processor, via a routing table, a first network interface allocated to communicate with the server;
• determining, by the processor, from the routing table, a set of default routes in absence of a route corresponding to the client;
• identifying, by the processor, a second network interface allocated to communicate with the client, in response to receipt of the initial data packet from the client via the second network interface, the identifying further comprising, by the processor:
• replicating the initial data packet for each default route from the set of default routes;
• forwarding replicas of the initial data packet on a network interface corresponding to each respective default route;
• and
• receiving an acknowledgement packet from the client on the second network interface;
• establishing, by the processor, a connection between the server and the client via the first network interface and the second network interface;
• recording, by the processor, the established connection in a connection table stored in a memory, the established connection comprising the first and second network interfaces;
• and
• routing, by the processor, subsequent data packets of the data transfer between the client and the server via the established connection stored in the connection table instead of a default route from among the set of default routes.

A non-transitory computer readable media comprising instructions executable by a processor, the non-transitory computer readable media comprising:

• instructions to establish a plurality of default routes comprising a first default route configured to communicate with a first network via a first network interface and a second default route configured to communicate with a second network via a second network interface;
• instructions to update a routing table to configure a third network interface to communicate with a server;
• instructions to derive reachability information of a client in response to receipt from the server of an initial data packet of a data transfer between the client and the server, wherein the reachability information indicates whether the client is associated with the first network or the second network, wherein the instructions to derive include instructions to:
• duplicate the initial data packet to generate a replicated initial data packet;
• transfer the initial data packet via the first network interface and transfer the replicated initial data packet via the second network interface;
• and
• derive the reachability information of the client to include the first network interface based on receipt of an acknowledgment data packet from the client via the first network interface;
• instructions to add the derived reachability information between the client and the server in a connection table;
• and
• instructions to transfer subsequent packets of the data transfer via the derived reachability information in the connection table instead of the default routes.