公开(公告)号：US12160408B2

公开(公告)日：2024-12-03

申请号：US18197090

申请日：2023-05-14

Applicant: Nicira, Inc.

Inventor： Ajit Ramachandra Mayya ,  Parag Pritam Thakore ,  Stephen Craig Connors ,  Steven Michael Woo ,  Sunil Mukudan ,  Thomas Harold Speeter

IPC: H04L9/40 ,  H04L12/46 ,  H04L12/66 ,  H04L45/42 ,  H04L49/35 ,  G06N20/00 ,  H04L67/10

Abstract: In one aspect, a computerized system useful for implementing a virtual private network (VPN) including an edge device that automatically establishes an Internet Protocol Security (IPsec) tunnel alongside an unsecure Multipath Protocol (MP) tunnel with a gateway device in preparation for a transmission of a secure traffic communication. The edge device has a list of local subnets. The edge device sends the list of local subnets to the gateway during an initial MP tunnel establishment handshake message exchange between the edge device and the gateway device. Each subnet includes an indication of whether the subnet is reachable over the VPN. A gateway device that automatically establishes the IPsec tunnel alongside the unsecure MP tunnel with the edge device. An enterprise datacenter server that comprises an orchestrator module that receives a toggle the VPN command and enables the VPN on the orchestrator. The orchestrator informs the edge device the list of subnets is accessible over the VPN causing the edge device to update the gateway device with a new list of subnets of the edge device that accessible over the VPN.

公开(公告)号：US20240048408A1

公开(公告)日：2024-02-08

申请号：US18382311

申请日：2023-10-20

Applicant: Nicira, Inc.

Inventor： Ajit Ramachandra Mayya ,  Parag Pritam Thakore ,  Stephen Craig Connors ,  Steven Michael Woo ,  Sunil Mukundan ,  Thomas Harold Speeter ,  Vipin Kumar

IPC: H04L12/66 ,  H04L41/5041 ,  H04L41/50 ,  H04L43/0894 ,  H04L45/02 ,  H04L47/24 ,  H04L69/325

CPC classification number: H04L12/66 ,  H04L41/5041 ,  H04L41/5096 ,  H04L43/0894 ,  H04L45/04 ,  H04L47/24 ,  H04L69/325 ,  H04L45/02 ,  H04L2012/4629

Abstract: In one aspect, A computerized method of a gateway distributing routes learned through routing protocols (RP) into a Border Gateway Protocol (BGP) includes the step of providing a first gateway that receives a route over a routing protocol. The method includes the step of with the first gateway, redistributing the route to one or more peer routers as a BGP route based on one or more specified criteria. The method includes the step of setting a gateway precedence based on the redistribution of the route to the one or more peer routers as the BGP route. The method includes the step of, based on the gateway precedence, setting a second, gateway to automatically redistribute the route with different priorities to influence steering of traffic to a preferred gateway,

公开(公告)号：US11444872B2

公开(公告)日：2022-09-13

申请号：US16699719

申请日：2019-12-01

Applicant: Nicira, Inc.

Inventor： Ajit Ramachandra Mayya ,  Parag Pritam Thakore ,  Stephen Craig Connors ,  Sunil Mukundan ,  Thomas Harold Speeter

IPC: H04L12/741 ,  H04L12/66 ,  H04L12/46 ,  H04L12/717 ,  H04L29/06 ,  H04L12/931 ,  H04L12/725 ,  H04L12/26 ,  H04L45/745 ,  H04L43/028 ,  H04L45/42 ,  H04L9/40 ,  H04L49/35 ,  H04L45/302 ,  H04L67/10 ,  G06N20/00

Abstract: In one aspect, a computerized method of an application routing service includes the step of using a deep-packet inspection (DPI) technique on a first network flow to identify an application. The method includes the step of storing an Internet-protocol (IP) address and a port number used by the application and an identity of the application in a database. The method includes the step of detecting a second network flow. The method includes the step of identifying the IP address and the port number of the application in the second network flow. The method includes the step of looking up the IP address and the port number in the database. The method includes the step of identifying the application based on the IP address and the port number.

公开(公告)号：US11349722B2

公开(公告)日：2022-05-31

申请号：US16945867

申请日：2020-08-01

Applicant: Nicira, Inc.

Inventor： Ajit Ramachandra Mayya ,  Parag Pritam Thakore ,  Stephen Craig Connors ,  Steven Michael Woo ,  Sunil Mukundan ,  Nitin Kumar Ananda

IPC: H04L12/24 ,  H04L12/46 ,  H04L12/26 ,  H04L29/06 ,  H04L12/803 ,  H04L41/12 ,  H04L41/0803 ,  H04L43/0876 ,  H04L43/0811 ,  H04L9/40 ,  H04L47/125

Abstract: In one aspect, a computerized method useful for connecting to a multipath hub in a cluster includes the step of, with a gateway in a same network as the cluster, receiving, from a branch edge, a request to connect to a logical identifier (ID) of the multipath hub. The gateway recognizes a logical ID representing a cluster. The gateway determines a least-loaded edge in the cluster to be the multipath hub. The gateway returns a connectivity information for the multipath hub. The branch edge configures a tunnel to the multipath hub.

公开(公告)号：US11050588B2

公开(公告)日：2021-06-29

申请号：US16656555

申请日：2019-10-17

Applicant: Nicira, Inc.

Inventor： Ajit Ramachandra Mayya ,  Parag Pritam Thakore ,  Stephen Craig Connors ,  Steven Michael Woo ,  Sunil Mukundan ,  Thomas Harold Speeter ,  Vipin Kumar

IPC: H04L12/66 ,  H04L29/08 ,  H04L12/851 ,  H04L12/715 ,  H04L12/24 ,  H04L12/26 ,  H04L12/751 ,  H04L12/723 ,  H04L12/46

Abstract: In one aspect, A computerized method of a gateway distributing routes learned through routing protocols (RP) into a Border Gateway Protocol (BGP) includes the step of providing a first gateway that receives a route over a routing protocol. The method includes the step of with the first gateway, redistributing the route to one or more peer routers as a BGP route based on one or more specified criteria. The method includes the step of setting a gateway precedence based on the redistribution of the route to the one or more peer routers as the BGP route. The method includes the step of, based on the gateway precedence, setting a second gateway to automatically redistribute the route with different priorities to influence steering of traffic to a preferred gateway.

公开(公告)号：US10938693B2

公开(公告)日：2021-03-02

申请号：US16724154

申请日：2019-12-20

Applicant: Nicira, Inc.

Inventor： Ajit Ramachandra Mayya ,  Parag Pritam Thakore ,  Stephen Craig Connors ,  Steven Michael Woo ,  Sunil Mukundan ,  Thomas Harold Speeter

IPC: H04L12/26 ,  H04L12/707 ,  H04L12/721 ,  H04L12/28 ,  H04L12/729 ,  H04L12/24 ,  H04L12/725 ,  H04L12/815 ,  H04L12/66 ,  H04L29/12

Abstract: In one aspect, a computerized method includes the step of providing process monitor in a Gateway. The method includes the step of, with the process monitor, launching a Gateway. Daemon (GWD). The GWD runs a GWD process that implements a Network Address Translation (NAT) process. The NAT process includes receiving a set of data packets from one or more Edge devices and forwarding the set of data packets to a public Internet. The method includes the step of receiving another set of data packets from the public Internet and forwarding the other set of data packets to the one or more Edge devices. The method includes the step of launching a Network Address Translation daemon (NATD). The method includes the step of detecting that the GWD process is interrupted; moving the NAT process to the NATD.

公开(公告)号：US10749711B2

公开(公告)日：2020-08-18

申请号：US15221608

申请日：2016-07-28

Applicant: Nicira, Inc.

Inventor： Sunil Mukundan ,  Stephen Craig Connors ,  Steven Michael Woo ,  Ajit Ramachandra Mayya ,  Thomas Harold Speeter

IPC: H04L12/66 ,  H04L29/08 ,  H04L12/707 ,  H04L12/891 ,  H04L12/803 ,  H04L12/851 ,  H04L1/00 ,  H04L1/18 ,  H04L12/26 ,  H04L1/16

Abstract: In one exemplary aspect, an edge-gateway multipath method includes the step of providing an edge device in a local network communicatively coupled with a cloud-computing service in a cloud-computing network. A set of wide area network (WAN) links connected to the edge device are automatically detected. The WAN links are automatically measured without the need for an external router. The edge device is communicatively coupled with a central configuration point in the cloud-computing network. The method further includes the step of downloading, from the central configuration point, an enterprise-specific configuration data into the edge device. The enterprise-specific configuration data includes the gateway information. The edge device is communicatively coupled with a gateway in the cloud-computing network. The communicatively coupling of the edge device with the gateway includes a multipath (MP) protocol.

公开(公告)号：US20240380669A1

公开(公告)日：2024-11-14

申请号：US18780390

申请日：2024-07-22

Applicant: Nicira, Inc.

Inventor： Ajit Ramachandra Mayya ,  Parag Pritam Thakore ,  Stephen Craig Connors ,  Steven Michael Woo ,  Sunil Mukundan ,  Nitin Kumar Ananda

IPC: H04L41/12 ,  H04L9/40 ,  H04L12/46 ,  H04L41/0803 ,  H04L43/0811 ,  H04L43/0876 ,  H04L47/125

Abstract: In one aspect, a computerized method useful for connecting to a multipath hub in a cluster includes the step of, with a gateway in a same network as the cluster, receiving, from a branch edge, a request to connect to a logical identifier (ID) of the multipath hub. The gateway recognizes a logical ID representing a cluster. The gateway determines a least-loaded edge in the cluster to be the multipath hub. The gateway returns a connectivity information for the multipath hub. The branch edge configures a tunnel to the multipath hub.

公开(公告)号：US12047244B2

公开(公告)日：2024-07-23

申请号：US17827972

申请日：2022-05-30

Applicant: Nicira, Inc.

Inventor： Ajit Ramachandra Mayya ,  Parag Pritam Thakore ,  Stephen Craig Connors ,  Steven Michael Woo ,  Sunil Mukundan ,  Nitin Kumar Ananda

IPC: H04L41/12 ,  H04L9/40 ,  H04L12/46 ,  H04L41/0803 ,  H04L43/0811 ,  H04L43/0876 ,  H04L47/125

CPC classification number: H04L41/12 ,  H04L12/4633 ,  H04L41/0803 ,  H04L43/0811 ,  H04L43/0876 ,  H04L47/125 ,  H04L63/0272 ,  H04L63/029

Abstract: In one aspect, a computerized method useful for connecting to a multipath hub in a cluster includes the step of, with a gateway in a same network as the cluster, receiving, from a branch edge, a request to connect to a logical identifier (ID) of the multipath hub. The gateway recognizes a logical ID representing a cluster. The gateway determines a least-loaded edge in the cluster to be the multipath hub. The gateway returns a connectivity information for the multipath hub. The branch edge configures a tunnel to the multipath hub.

公开(公告)号：US20230308421A1

公开(公告)日：2023-09-28

申请号：US18197090

申请日：2023-05-14

Applicant: Nicira, Inc.

Inventor： Ajit Ramachandra Mayya ,  Parag Pritam Thakore ,  Stephen Craig Connors ,  Steven Michael Woo ,  Sunil Mukudan ,  Thomas Harold Speeter

IPC: H04L9/40 ,  H04L12/66 ,  H04L12/46 ,  H04L45/42 ,  H04L49/35

CPC classification number: H04L63/0272 ,  H04L12/66 ,  H04L12/4633 ,  H04L12/4641 ,  H04L63/029 ,  H04L45/42 ,  H04L49/35 ,  H04L63/0281 ,  H04L67/10

Abstract: In one aspect, a computerized system useful for implementing a virtual private network (VPN) including an edge device that automatically establishes an Internet Protocol Security (IPsec) tunnel alongside an unsecure Multipath Protocol (MP) tunnel with a gateway device in preparation for a transmission of a secure traffic communication. The edge device has a list of local subnets. The edge device sends the list of local subnets to the gateway during an initial MP tunnel establishment handshake message exchange between the edge device and the gateway device. Each subnet includes an indication of whether the subnet is reachable over the VPN. A gateway device that automatically establishes the IPsec tunnel alongside the unsecure MP tunnel with the edge device. An enterprise datacenter server that comprises an orchestrator module that receives a toggle the VPN command and enables the VPN on the orchestrator. The orchestrator informs the edge device the list of subnets is accessible over the VPN causing the edge device to update the gateway device with a new list of subnets of the edge device that accessible over the VPN.