Systems and methods for health based routing in an SDWAN

Patent metadata

Field	Value
Publication number	US-12432135-B2
Application number	US-202318237250-A
Country	US
Kind code	B2
Filing date	Aug 23, 2023
Priority date	Aug 23, 2023
Publication date	Sep 30, 2025
Grant date	Sep 30, 2025

Abstract

Various systems, devices, storage media, and methods are discussed for selecting communication paths based upon health status in a hub and spoke communication network.

First claim

What is claimed is:

1. A method for performing network communications in a hub and spoke network topology, the method comprising:
sending, by a first spoke network appliance, a dataset to a hub network appliance via at least a first communication link and a second communication link, wherein the hub network appliance determines whether a destination of traffic in the dataset is reachable by a second spoke network appliance in communication with the hub network appliance;
responsive to determining that the destination is reachable by the second spoke network appliance, receiving, by the first spoke network appliance, an instruction from the hub network appliance to communicate directly with the second spoke network appliance;
based at least in part on the instruction from the hub network appliance, performing, by the first spoke network appliance, sending a second dataset to the second spoke network appliance via at least a third communication link and a fourth communication link, wherein network communications with the second spoke network appliance using a third communication link selected in part based upon a health status of the third communication link; and
responsive to determining that the destination is not reachable by the second spoke network appliance, receiving, by the first spoke network appliance, an indication of which of the first and second communication link has been selected for communication with the hub network appliance in part based upon a health status of the first and second communication links.

2. The method of claim 1 , wherein the dataset identifies a destination.

3. The method of claim 2 , wherein the hub network appliance governs access to a secure network, and wherein the destination is a network device included in a local segment of the secure network, and wherein the second spoke network appliance governs access to the local segment of the secure network.

4. The method of claim 3 , wherein the local segment of the secure network is a first segment of the secure network, and wherein the first spoke network appliance governs access to a second local segment of the secure network.

5. The method of claim 1 , wherein the first spoke network appliance, the second spoke network appliance, and the hub network appliance are included in a software defined wide area network.

6. The method of claim 1 , wherein determining the first health status of the third communication link includes:
determining at least two characteristics of the third communication link, wherein the at least two characteristics of the third communication link are selected from a group consisting of: a latency of the third communication link; a rate at which network traffic is received via the third communication link; an error rate of the third communication link; and a cost of the third communication link; and
combining the at least two characteristics of the third communication link to create the first health status.

7. The method of claim 1 , wherein determining the second health status of the fourth communication link includes:
determining at least two characteristics of the fourth communication link, wherein the at least two characteristics of the fourth communication link are selected from a group consisting of: a latency of the fourth communication link; a rate at which network traffic is received via the fourth communication link; an error rate of the fourth communication link; and a cost of the fourth communication link; and
combining the at least two characteristics of the fourth communication link to create the second health status.

8. A network system arranged in a hub and spoke topology, the system comprising:
a hub network appliance configured to:
receive a dataset from a first spoke network appliance via a first communication link and a second communication link, wherein the first spoke network appliance governs access to a first local segment of a secure network including the hub network appliance, and wherein the dataset indicates a destination for network traffic from the first spoke network appliance;
determine whether the destination is within a second local segment of the secure network, wherein access to the second local segment is governed by a second spoke network appliance;
determine whether there exists a set of communication links allowing direct communication between the first spoke network appliance and the second spoke network appliance; and
responsive to the destination being within the second local segment of the secure network and an existing set of communication links allowing direct communication, communicate an instruction to the first spoke network appliance to perform network communications directly with the second spoke network appliance; and

the first spoke network appliance configured to:
based at least in part on receiving the instruction from the hub network appliance to perform network communications directly with the second spoke network appliance including sending a second dataset to the second spoke network appliance via at least a third communication link and a fourth communication link, and perform network communications with the second spoke network appliance using the third or the fourth communication link selected in part based upon a health status of the third and fourth communication links.

9. The system of claim 8 , the first spoke network appliance and the hub network appliance are included in a software defined wide area network.

10. The system of claim 8 , wherein determining the first health status of the third communication link and the second health status of the fourth communication link is done by the first spoke network appliance.

11. The system of claim 8 , wherein determining the first health status of the third communication link includes:
determining at least two characteristics of the third communication link, wherein the at least two characteristics of the third communication link are selected from a group consisting of: a latency of the third communication link; a rate at which network traffic is received via the third communication link; an error rate of the third communication link; and a cost of the third communication link; and
combining the at least two characteristics of the third communication link to create the first health status.

12. The system of claim 11 , wherein determining the second health status of the fourth communication link includes:
determining at least two characteristics of the fourth communication link, wherein the at least two characteristics of the fourth communication link are selected from a group consisting of: a latency of the fourth communication link; a rate at which network traffic is received via the fourth communication link; an error rate of the fourth communication link; and a cost of the fourth communication link; and
combining the at least two characteristics of the fourth communication link to create the second health status.

13. A non-transitory computer-readable medium, the non-transitory computer readable medium having stored therein instructions that when executed by a processing resource cause the processing resource to perform a method comprising:
sending, by a first spoke network appliance, a dataset to a hub network appliance via at least a first communication link and a second communication link, wherein the hub network appliance determines whether a destination of traffic in the dataset is reachable by a second spoke network appliance in communication with the hub network appliance;
responsive to determining that the destination is reachable by the second spoke network appliance, receiving, by the first spoke network appliance, an

Assignees

• Fortinet Inc

Inventors

• Yu Kun
• Fan Xiang
• Wei Yanheng
• Liang Di
• Yen Chih Ho

Classifications

• H04L45/76

  Routing in software-defined topologies, e.g. routing between virtual machines · CPC title

• H04L45/02

  Topology update or discovery · CPC title

• H04L45/302 Primary

  Route determination based on requested QoS · CPC title