Optimizing connectivity between data centers in a hybrid cloud computing system

Patent metadata

Field	Value
Publication number	US-10721098-B2
Application number	US-201514838559-A
Country	US
Kind code	B2
Filing date	Aug 28, 2015
Priority date	Aug 28, 2015
Publication date	Jul 21, 2020
Grant date	Jul 21, 2020

Abstract

Connectivity between data centers in a hybrid cloud system having a first data center managed by a first organization and a second data center managed by a second organization, the first organization being a tenant in the second data center, is optimized. According to the described technique, a path-optimized connection is established through a wide area network (WAN) between a first gateway of a first data center and a second gateway of a second data center for an application executing in the first data center based on performance of paths across a set of Internet Protocol (IP) flows. Application packets received from the application at the first gateway are forwarded to a WAN optimization appliance in the first data center. WAN optimized application packets received from the WAN optimization appliance at the first gateway are then sent to the second gateway over the path-optimized connection.

First claim

We claim:

1. A method of optimizing connectivity between data centers in a hybrid cloud system having a first data center managed by a first organization and a second data center managed by a second organization, the first organization being a tenant in the second data center, comprising:
using a first gateway of the first data center, establishing a path-optimized connection through a wide area network (WAN) between the first gateway of a first data center and a second gateway of a second data center for an application executing in the first data center based on performance of paths across a set of Internet Protocol (IP) flows and a plurality of policies that are mapped to the set of IP flows based on calculated performance of each of the set of IP flows, wherein the policies are automatically assigned to different types of application traffic by the first gateway of the first data center, wherein each of the policies specifies one or more constraints to be met before an application traffic is assigned that policy, wherein the one or more constraints are based on application traffic type and time of day, wherein establishing the path-optimized connection includes probing the WAN with test packets between the first gateway of the first data center to the second gateway of the second data center through communication nodes of the WAN that are managed by at least one third-party service provider with respect to the first and second organizations to identify a plurality of paths between the first gateway and the second gateway by, at the first gateway, varying an IP flow tuple of the test packets across the set of IP flows, wherein the first gateway is located in a private cloud of the hybrid cloud system, wherein at least one traffic management scheme is implemented for the WAN by the at least one third-party service provider to control traffic flow through at least some of the communication nodes of the WAN, and wherein varying the IP flow tuple of the test packets across the set of IP flows comprises varying source and destination port numbers of the test packets to cause the paths to form within the WAN;
using the first gateway of the first data center, forwarding application packets received from the application at the first gateway to a WAN optimization appliance in the first data center, wherein the WAN optimization appliance performs at least one WAN optimization on the application packets to generate WAN optimized application packets, wherein the at least one WAN optimization includes deduplication, latency optimization, forward error correction, protocol spoofing, or traffic shaping, and wherein the WAN optimization appliance is pre-loaded with caching data for use with the at least one WAN optimization prior to execution of the application; and
using the first gateway of the first data center, sending the WAN optimized application packets received from the WAN optimization appliance through the first gateway to the second gateway over the path-optimized connection.

2. The method of claim 1 , wherein the WAN includes a public Internet having networks of a plurality of service providers, and wherein at least one of the networks is configured with at least one traffic management scheme.

3. The method of claim 1 , wherein the step of establishing the path-optimized connection comprises:
selecting an IP flow from the set of IP flows for the application.

4. The method of claim 3 , wherein the step of establishing the path-optimized connection comprises:
establishing a secure channel between the first gateway and the second gateway;
encapsulating the WAN optimized application packets within path-optimized packets according to the selected IP flow at the first gateway; and
encrypting the path-optimized packets for transmission over the secure channel.

5. The method of claim 1 , further comprising:
providing a virtual WAN interface to the WAN optimization appliance by the first gateway to mimic a connection to the WAN.

6. A computer system, comprising:
a virtualized computing system;
a first gateway coupled between the virtualized computing system and a wide area network (WAN);
a WAN optimization appliance coupled to the first gateway;
the first gateway configured to:
probe the WAN with test packets between the first gateway and a second gateway through communication nodes of the WAN that are managed by at least one third-party service provider to identify a plurality of paths between the first gateway and the second gateway by, at the first gateway, varying an IP flow tuple of the test packets across a set of Internet Protocol (IP) flows, wherein the first gateway is located in a private cloud of the computer system, wherein at least one traffic management scheme is implemented for the WAN by the at least one third-party service provider to control traffic flow through at least some of the communication nodes of the WAN by varying an IP flow tuple of the test packets across the set of IP flows, and wherein varying the IP flow tuple of the test packets across the set of IP flows comprises varying source and destination port numbers of the test packets to cause the paths to form within the WAN;
establish a path-optimized connection through the WAN to the second gateway for an application executing in a first data center based on performance of paths across the set of IP flows and a plurality of policies that are mapped to the set of IP flows based on calculated performance of each of the set of IP flows, wherein the policies are automatically assigned to different types of application traffic by the first gateway of the first data center, wherein each of the policies specifies one or more constraints to be met before an application traffic is assigned that policy, and wherein the one or more constraints are based on application traffic type and time of day; and
forward application packets received from the application to the WAN optimization appliance, wherein the WAN optimization appliance performs at least one WAN optimization on the application packets to generate WAN optimized application packets, wherein the at least one WAN optimization includes deduplication, latency optimization, forward error correction, protocol spoofing, or traffic shaping, and wherein the WAN optimization appliance is pre-loaded with caching data for use with the at least one WAN optimization prior to execution of the application; and
send WAN optimized application packets received from the WAN optimization appliance through the first gateway to the second gateway over the path-optimized connection.

7. The computer system of claim 6 , wherein the WAN includes a public Internet having networks of a plurality of service providers, and wherein at least one of the networks is configured with at least one traffic management scheme.

8. The computer system of claim 6 , wherein the first gateway is configured to:
select an IP flow from the set of IP flows for the application.

9. The computer system of claim 8 , wherein the first gateway is configured to:
establish a secure channel between the first gateway and the second gateway;
encapsulate the WAN optimized application packets within path-optimized packets according to the selected IP flow; and
encrypt the path-optimized packets for transmission over the secure channel.

10. The computer system of claim 6 , wherein the first gateway is configured to:
provide a virtual WAN interface to the WAN optimization appliance to mimic a connection to the WAN.

11. A non-transitory computer readable medium comprising instructions, which when executed in a computer system, causes the computer system to carry out a method of optimizing connectivity between data centers in a h

Assignees

• Vmware Inc

Inventors

• Maskalik Serge
• Wu Weiqing
• Srinivasan Aravind
• Thakkar Sachin
• Basak Debashis

Classifications

• H04L67/60

  Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources (admission control or resource allocation H04L47/70) · CPC title

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• G06F9/45558

  Hypervisor-specific management and integration aspects · CPC title

• H04L12/66 Primary

  Arrangements for connecting between networks having differing types of switching systems, e.g. gateways · CPC title