-
公开(公告)号：US20230026865A1
公开(公告)日：2023-01-26
申请号：US17384738
申请日：2021-07-24
Applicant: VMware, Inc.
Inventor： Pierluigi Rolando , Jayant Jain , Raju Koganty , Shadab Shah , Abhishek Goliya , Chandran Anjur Narasimhan , Gurudutt Maiya Belur , Vikas Kamath
IPC: H04L29/06 , H04L12/717 , H04L12/713 , H04L12/721
Abstract: A software-defined wide area network (SD-WAN) environment that leverages network virtualization management deployment is provided. Edge security services managed by the network virtualization management deployment are made available in the SD-WAN environment. Cloud gateways forward SD-WAN traffic to managed service nodes to apply security services. Network traffic is encapsulated with corresponding metadata to ensure that services can be performed according to the desired policy. Point-to-point tunnels are established between cloud gateways and the managed service nodes to transport the metadata to the managed service nodes using an overlay logical network. Virtual network identifiers (VNIs) in the metadata are used by the managed service nodes to identify tenants/policies. A managed service node receiving a packet uses provider service routers (T0-SR) and tenant service routers (T1-SRs) based on the VNI to apply the prescribed services for the tenant, and the resulting traffic is returned to the cloud gateway that originated the traffic.
-
公开(公告)号：US20230026330A1
公开(公告)日：2023-01-26
申请号：US17384736
申请日：2021-07-24
Applicant: VMware, Inc.
Inventor： Pierluigi Rolando , Jayant Jain , Raju Koganty , Shadab Shah , Abhishek Goliya , Chandran Anjur Narasimhan , Gurudutt Maiya Belur , Vikas Kamath
IPC: H04L29/06 , H04L12/46 , H04L12/717 , H04L12/721 , H04L12/713
Abstract: A software-defined wide area network (SD-WAN) environment that leverages network virtualization management deployment is provided. Edge security services managed by the network virtualization management deployment are made available in the SD-WAN environment. Cloud gateways forward SD-WAN traffic to managed service nodes to apply security services. Network traffic is encapsulated with corresponding metadata to ensure that services can be performed according to the desired policy. Point-to-point tunnels are established between cloud gateways and the managed service nodes to transport the metadata to the managed service nodes using an overlay logical network. Virtual network identifiers (VNIs) in the metadata are used by the managed service nodes to identify tenants/policies. A managed service node receiving a packet uses provider service routers (T0-SR) and tenant service routers (T1-SRs) based on the VNI to apply the prescribed services for the tenant, and the resulting traffic is returned to the cloud gateway that originated the traffic.
-
公开(公告)号：US20230025586A1
公开(公告)日：2023-01-26
申请号：US17384735
申请日：2021-07-24
Applicant: VMware, Inc.
Inventor： Pierluigi Rolando , Jayant Jain , Raju Koganty , Shadab Shah , Abhishek Goliya , Chandran Anjur Narasimhan , Gurudutt Maiya Belur , Vikas Kamath
IPC: H04L29/06 , H04L12/713 , H04L12/717 , H04L12/721
Abstract: A software-defined wide area network (SD-WAN) environment that leverages network virtualization management deployment is provided. Edge security services managed by the network virtualization management deployment are made available in the SD-WAN environment. Cloud gateways forward SD-WAN traffic to managed service nodes to apply security services. Network traffic is encapsulated with corresponding metadata to ensure that services can be performed according to the desired policy. Point-to-point tunnels are established between cloud gateways and the managed service nodes to transport the metadata to the managed service nodes using an overlay logical network. Virtual network identifiers (VNIs) in the metadata are used by the managed service nodes to identify tenants/policies. A managed service node receiving a packet uses provider service routers (T0-SR) and tenant service routers (T1-SRs) based on the VNI to apply the prescribed services for the tenant, and the resulting traffic is returned to the cloud gateway that originated the traffic.
-
公开(公告)号：US11375005B1
公开(公告)日：2022-06-28
申请号：US17384737
申请日：2021-07-24
Applicant: VMware, Inc.
Inventor： Pierluigi Rolando , Jayant Jain , Raju Koganty , Shadab Shah , Abhishek Goliya , Chandran Anjur Narasimhan , Gurudutt Maiya Belur , Vikas Kamath
Abstract: A software-defined wide area network (SD-WAN) environment that leverages network virtualization management deployment is provided. Edge security services managed by the network virtualization management deployment are made available in the SD-WAN environment. Cloud gateways forward SD-WAN traffic to managed service nodes to apply security services. Network traffic is encapsulated with corresponding metadata to ensure that services can be performed according to the desired policy. Point-to-point tunnels are established between cloud gateways and the managed service nodes to transport the metadata to the managed service nodes using an overlay logical network. Virtual network identifiers (VNIs) in the metadata are used by the managed service nodes to identify tenants/policies. A managed service node receiving a packet uses provider service routers (T0-SR) and tenant service routers (T1-SRs) based on the VNI to apply the prescribed services for the tenant, and the resulting traffic is returned to the cloud gateway that originated the traffic.
-
-
-
Search Results
4
records
(took 0.017 seconds)
