公开(公告)号：US11063903B2

公开(公告)日：2021-07-13

申请号：US15950983

申请日：2018-04-11

Applicant: VMWARE, INC.

Inventor： Daniel G. Wing ,  Dexiang Wang ,  Nidheesh Dubey

IPC: H04L29/12 ,  H04L29/06 ,  H04L9/08 ,  G06F9/455 ,  H04L29/08 ,  H04L12/46

Abstract: The method for a virtual machine to use a port and loopback IP addresses allocation scheme for full-mesh communications with transparent transport layer security tunnels is presented. In an embodiment, the method comprises detecting, at a redirect agent implemented in a first machine, a packet that is sent from a client application executing on the first machine toward a server application executing on a second machine; and determining, by the redirect agent, whether a first redirect rule matches the packet. In response to determining that the first redirect rule matches the packet, the redirect agent applies the first redirect rule to the packet to translate the packet into a translated packet, and provides the translated packet to a client agent implemented in the first machine to cause the client agent to transmit the translated packet to a server agent implemented in the second machine.

公开(公告)号：US11936613B2

公开(公告)日：2024-03-19

申请号：US17371490

申请日：2021-07-09

Applicant: VMware, Inc.

Inventor： Daniel G. Wing ,  Dexiang Wang ,  Nidheesh Dubey

IPC: H04L61/256 ,  G06F9/455 ,  H04L9/08 ,  H04L9/40 ,  H04L12/46 ,  H04L61/2557 ,  H04L61/2592 ,  H04L67/563

CPC classification number: H04L61/256 ,  G06F9/45558 ,  H04L9/0861 ,  H04L12/4633 ,  H04L61/2557 ,  H04L61/2592 ,  H04L63/029 ,  H04L63/0428 ,  H04L63/061 ,  H04L67/563 ,  G06F2009/45595

Abstract: The method for a virtual machine to use a port and loopback IP addresses allocation scheme for full-mesh communications with transparent transport layer security tunnels is presented. In an embodiment, the method comprises detecting, at a redirect agent implemented in a first machine, a packet that is sent from a client application executing on the first machine toward a server application executing on a second machine; and determining, by the redirect agent, whether a first redirect rule matches the packet. In response to determining that the first redirect rule matches the packet, the redirect agent applies the first redirect rule to the packet to translate the packet into a translated packet, and provides the translated packet to a client agent implemented in the first machine to cause the client agent to transmit the translated packet to a server agent implemented in the second machine.