Virtual wide area network overlays

Patent metadata

Field	Value
Publication number	US-10313930-B2
Application number	US-201615148933-A
Country	US
Kind code	B2
Filing date	May 6, 2016
Priority date	Jul 3, 2008
Publication date	Jun 4, 2019
Grant date	Jun 4, 2019

Abstract

Disclosed herein are systems and methods for the creation, maintenance and management of virtual overlay networks across multiple communication networks managed by service providers. The simple creation and management of network overlays is accomplished via a network orchestrator manager, allowing for automation of configuration of connected network devices throughout an entire organization's network, regardless of the physical location of each device.

First claim

What is claimed is:

1. A system for creating an overlay network for a wide area network, comprising:
a plurality of network appliances, each connected to at least two communication networks that are Wide Area Networks (WAN), wherein each of the plurality of network appliances has a plurality of network interfaces for transmitting and receiving data over the communication networks; and
an orchestrator device in communication with each of the plurality of network appliances, wherein the orchestrator device:
processes information regarding configuration of each network interface at each of the plurality of network appliances;
assigns a first label to data traffic from a first network interface of a first network appliance;
creates a first underlay tunnel from the first network interface of the first network appliance, for the data traffic with the first label;
assigns a second label to data traffic from a second network interface of the first network appliance;
creates a second underlay tunnel from the second network interface of the first network appliance, for the data traffic with the second label; and
creates a bonded tunnel for a subset of data transmitted between the first network appliance and a second network appliance, wherein the bonded tunnel is configured to utilize both the first underlay tunnel and the second underlay tunnel for the subset of data transmitted.

2. The system of claim 1 , wherein the bonded tunnel carries the subset of data transmitted between the first network appliance and the second network appliance, the subset of data having the same label.

3. The system of claim 2 , wherein the subset of data transmitted is selected based on the interface label or an access policy.

4. The system of claim 1 , wherein each of the plurality of network appliances includes at least one LAN interface and at least one WAN interface as part of the plurality of network interfaces.

5. The system of claim 1 , wherein the first label is associated with a traffic type.

6. The system of claim 1 , wherein the first label is associated with a network type or network provider.

7. The system of claim 1 , wherein the orchestrator device further receives information regarding a priority of data type for the data transmitted between the first network appliance and the second network appliance, and configures each network appliance in accordance with the priority.

8. The system of claim 1 , further comprising a database for maintaining information regarding a traffic access policy for the plurality of network appliances.

9. The system of claim 1 , wherein at least one of the plurality of network appliances is located in a cloud network.

10. The system of claim 1 , wherein each of the plurality of network appliances is connected to at least one other network appliance via at least one tunnel.

11. The system of claim 1 , wherein the first label distinguishes at least one of voice traffic, video traffic, and data traffic.

12. The system of claim 1 , wherein the at least two communication networks connected to the each of the plurality of network appliances comprise at least two of: Internet infrastructure, MPLS infrastructure, and LTE wireless connection infrastructure.

13. The system of claim 1 , wherein the orchestrator device further comprises information regarding network performance metrics of bonded tunnels between each pair of network appliances, the network performance metrics representing application-oriented performance.

14. The system of claim 1 , wherein the orchestrator device further comprises information regarding network performance metrics of underlay tunnels, the network performance metrics representing network-oriented performance.

15. The system of claim 14 , wherein the orchestrator device displays information regarding network performance metrics for each underlay tunnel to a network administrator via a grid graphical user interface.

16. The system of claim 1 , wherein the orchestrator device further selects one or more underlay tunnels to transfer network data, the one or more underlay tunnels selected based at least in part on network performance metrics.

17. The system of claim 16 , wherein the network performance metrics comprise at least one of re-ordering, loss, latency, and jitter.

18. The system of claim 1 , wherein at least one of the first underlay tunnel and the second underlay tunnel is an IPsec tunnel.

19. The system of claim 1 , wherein information regarding configuration of each network interface further comprises information regarding a type of data traffic received at each network interface.

20. The system of claim 1 , wherein information regarding configuration of each network interface further comprises information regarding a network access link connected to each network interface, the network access link providing access for the network appliance to a particular communication network.

Assignees

• Silver Peak Systems Inc

Inventors

• Hughes David Anthony
• Bheemarajaiah Santosh
• Ennis Damon John
• Merwin David Holt
• Muralt Rolf
• Singh Pawan Kumar
• Tedijanto Theodore E
• Lingarajan Lokesh
• Travalia Edward P
• Sadasivam Krishna Kumar
• Yen Shyh Pei
• Thakur Abhelaksh
• Torda Catrina A

Classifications

• H04L45/50

  using label swapping, e.g. multi-protocol label switch [MPLS] · CPC title

• H04L47/2441

  relying on flow classification, e.g. using integrated services [IntServ] · CPC title

• H04L43/0847

  Transmission error · CPC title

• H04L43/0829

  Packet loss · CPC title

• H04W28/18 Primary

  Negotiating wireless communication parameters · CPC title