Hardware address consistency management

Patent metadata

Field	Value
Publication number	US-11700228-B2
Application number	US-202217716035-A
Country	US
Kind code	B2
Filing date	Apr 8, 2022
Priority date	Nov 4, 2020
Publication date	Jul 11, 2023
Grant date	Jul 11, 2023

Abstract

A VPN tunnel interface is instantiated within a router based on a tunnel network namespace. One or more virtual peers corresponding to the VPN tunnel interface and one or more virtual ethernet interfaces corresponding to the one or more virtual peers are instantiated. The tunnel network namespace is configured to route, based on a source address, network traffic from a specified client device to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface. A connection is established between a client device and a VPN process of the router and a traffic flow is transported to and from the client device through a VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual ethernet interfaces.

First claim

What is claimed is:

1. A method for transporting network traffic, the method comprising:
instantiating a VPN tunnel interface within a router based on a tunnel network namespace;
instantiating one or more virtual peers corresponding to the VPN tunnel interface;
instantiating one or more virtual interfaces corresponding to the one or more virtual peers;
configuring the tunnel network namespace to route the network traffic from a specified client device to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface, the routing being based on a source address;
establishing a connection between a client device and a VPN process of the router;
encapsulating, by one of said virtual peers, a traffic flow using an existing media access control (MAC) address of the specified client device; and
transporting the traffic flow to and from the client device through a VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual interfaces, based on the configured tunnel network namespace.

2. The method of claim 1 , further comprising implementing said router as a virtual router residing in a cloud environment.

3. A method for transporting network traffic, the method comprising:
obtaining a request to instantiate a router, the request including an address of a specified client device;
instantiating a VPN tunnel interface within the router based on a tunnel network namespace;
instantiating one or more virtual peers corresponding to the VPN tunnel interface;
instantiating one or more virtual interfaces corresponding to the one or more virtual peers;
configuring the tunnel network namespace to route the network traffic from the specified client device to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface, the routing being based on a source address;
establishing a connection between a client device and a VPN process of the router; and
transporting a traffic flow to and from the client device through a VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual interfaces, based on the configured tunnel network namespace.

4. The method of claim 3 , further comprising informing a router controller of an address of the router.

5. The method of claim 3 , further comprising creating a virtual private network (VPN) profile for the client device, the virtual private network (VPN) profile comprising a client media access control (MAC) address and a router internet protocol (IP) address and sending a virtual private network (VPN) configuration to the router.

6. The method of claim 3 , further comprising polling a router controller for a virtual private network (VPN) profile.

7. The method of claim 3 , wherein said instantiating of said VPN tunnel interface within said router is performed in a customer premises environment.

8. The method of claim 3 , further comprising encapsulating, by said virtual peer, the traffic flow using an existing media access control (MAC) address of the client device.

9. The method of claim 3 , further comprising creating a TUN device in the tunnel network namespace.

10. The method of claim 3 , wherein each virtual interface is instantiated as an interface for a corresponding virtual peer of the one or more virtual peers.

11. A system for communicating with a plurality of client devices, the system comprising:
a router having a default network namespace, a virtual private network (VPN) process, a virtual private network (VPN) tunnel interface, one or more virtual peers, and one or more virtual interfaces;
a VPN tunnel; and
a router controller configured to:
trigger an instantiation of the VPN tunnel interface within the router based on a tunnel network namespace;
trigger an instantiation of the one or more virtual peers, within the tunnel network namespace, corresponding to the VPN tunnel interface;
trigger an instantiation of the one or more virtual interfaces, corresponding to the one or more virtual peers, within the default network namespace; and

configure the tunnel network namespace to route network traffic from a specified one of the client devices to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface, the routing being based on a source address;
wherein the router and the router controller are cooperatively configured to establish a connection between the specified client device and the virtual private network (VPN) process and transport a traffic flow to and from the specified client device through the VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual interfaces, based on the configured tunnel network namespace, and wherein one of said virtual peers encapsulates the traffic flow using an existing media access control (MAC) address of the specified client device.

12. The system of claim 11 , wherein the router is implemented as a virtual router residing in a cloud environment.

13. A system for communicating with a plurality of client devices, the system comprising:
a router having a default network namespace, a virtual private network (VPN) process, a virtual private network (VPN) tunnel interface, one or more virtual peers, and one or more virtual interfaces;
a VPN tunnel; and
a router controller configured to:
obtain a request to instantiate the router, the request including an address of a specified client device of the client devices;
trigger an instantiation of the VPN tunnel interface within the router based on a tunnel network namespace;
trigger an instantiation of the one or more virtual peers, within the tunnel network namespace, corresponding to the VPN tunnel interface;
trigger an instantiation of the one or more virtual interfaces, corresponding to the one or more virtual peers, within the default network namespace; and
configure the tunnel network namespace to route network traffic from the specified client device to a specified virtual peer of the one or more virtual peers via the VPN tunnel interface, the routing being based on a source address;

wherein the router and the router controller are cooperatively configured to establish a connection between the specified client device and the virtual private network (VPN) process and transport a traffic flow to and from the specified client device through the VPN tunnel via the VPN tunnel interface, the one or more virtual peers, and the one or more virtual interfaces, based on the configured tunnel network namespace.

14. The system of claim 13 , the router controller being further configured to receive an address of the router.

15. The system of claim 13 , the router controller being further configured to create a virtual private network (VPN) profile for the specified client device, the virtual private network (VPN) profile comprising a client media access control (MAC) address and a router internet protocol (IP) address and sending a virtual private network (VPN) configuration to the router.

16. The system of claim 13 , the router controller being further configured to respond to polling for a virtual private network (VPN) profile.

17. The system of claim 13 , wherein the instantiating of the VPN tunnel interface within the router is performed in a customer premises environment.

18. The system of claim 13 , wherein said virtual peer encapsulates the traffic flow using an existing media access control (MAC) address of the specified client device.

19. The system of claim 13 , the router controller being furth

Assignees

• Charter Communications Operating Llc

Inventors

• Labbee Micah
• Vinson Tyson
• Turner Chris

Classifications

• H04L61/2592 Primary

  using tunnelling or encapsulation · CPC title

• H04L12/4633 Primary

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L2101/622

  Layer-2 addresses, e.g. medium access control [MAC] addresses · CPC title