Traffic routing in backup and recovery of non-addressable hosts

Patent metadata

Field	Value
Publication number	US-12470478-B2
Application number	US-202318119242-A
Country	US
Kind code	B2
Filing date	Mar 8, 2023
Priority date	Mar 8, 2023
Publication date	Nov 11, 2025
Grant date	Nov 11, 2025

Abstract

Methods, systems, and devices for data management are described. A data management system (DMS) may provide backup and recovery services to one or more non-addressable hosts within a network. The DMS may receive a packet from a host within the network. A source internet protocol (IP) address of the packet, when received at the DMS, may be an IP address associated with the network. The packet may also include an identifier associated with the host. The DMS may include one or more storage entities used to back up the one or more hosts. To route the packet to a storage entity used to back up the host, the DMS may set the source IP address of the received packet to be a virtual IP address associated with the host based on the identifier and use the virtual IP address to route the packet to the storage entity.

First claim

What is claimed is:

1 . A method for data management, comprising:
receiving a packet at a data management system, wherein the packet is from a host that is within a network that includes one or more hosts for which the data management system is configured to provide backup and recovery services, wherein the packet includes an indication of a source internet protocol address, wherein, when the packet is received, the source internet protocol address is indicative of the network rather than the host, and wherein the packet further comprises an identifier associated with the host; setting, after the packet is received at the data management system, the source internet protocol address of the packet to be a virtual internet protocol address associated with the host based at least in part on the identifier associated with the host; routing the packet to a storage entity within the data management system that is used to back up the host, wherein routing the packet to the storage entity is based at least in part on the source internet protocol address being set to the virtual internet protocol address associated with the host; and establishing a connection between the host and the storage entity based at least in part on routing the packet to the storage entity in accordance with the virtual internet protocol address, wherein the storage entity is configured to provide the backup and recovery services to the host.

2 . The method of claim 1 , further comprising:
allocating, at the data management system, the virtual internet protocol address to the host; and selecting the virtual internet protocol address to set as the source internet protocol address based at least in part on a mapping between the identifier associated with the host and the virtual internet protocol address allocated to the host.

3 . The method of claim 1 , further comprising:
instantiating, within the network, a virtual machine configured to create a tunnel for communications between the data management system and the one or more hosts, wherein the packet is received via the tunnel; and allocating, by the virtual machine, the virtual internet protocol address to the host, wherein the packet comprises the virtual internet protocol address when received at the data management system based at least in part on the allocation, and wherein the source internet protocol address is set to be the virtual internet protocol address based at least in part on the packet comprising the virtual internet protocol address.

4 . The method of claim 3 , wherein the identifier associated with the host is the virtual internet protocol address.

5 . The method of claim 1 , further comprising:
allocating one or more virtual internet protocol addresses to the one or more hosts, including the virtual internet protocol address to the host, wherein respective values of the one or more virtual internet protocol addresses are included within an address range associated with the network.

6 . The method of claim 1 , further comprising:
generating a routing configuration that maps respective virtual internet protocol addresses associated with respective hosts included in the one or more hosts to respective domains associated with respective storage entities within the data management system used to back up the respective hosts, wherein the packet is routed to the storage entity in accordance with the routing configuration.

7 . The method of claim 1 , wherein setting the source internet protocol address of the packet to be the virtual internet protocol address comprises:
dropping the source internet protocol address indicative of the network as the source internet protocol address of the packet; and binding the virtual internet protocol address to the packet as the source internet protocol address of the packet.

8 . The method of claim 1 , wherein routing the packet to the storage entity comprises:
routing the packet using a demultiplexer of the data management system that is configured to monitor a port via which the packet is received at the data management system.

9 . The method of claim 1 , wherein receiving the packet comprises:
receiving the packet via a transport layer security (TLS) tunnel between the data management system and the network based at least in part on the host having an internet protocol address that is not directly reachable by the data management system.

10 . An apparatus for data management, comprising:
at least one processor; memory coupled with the at least one processor; and instructions stored in the memory and executable by the at least one processor to cause the apparatus to:
receive a packet at a data management system, wherein the packet is from a host that is within a network that includes one or more hosts for which the data management system is configured to provide backup and recovery services, wherein the packet includes an indication of a source internet protocol address, wherein, when the packet is received, the source internet protocol address is indicative of the network rather than the host, and wherein the packet further comprises an identifier associated with the host;
set, after the packet is received at the data management system, the source internet protocol address of the packet to be a virtual internet protocol address associated with the host based at least in part on the identifier associated with the host;
route the packet to a storage entity within the data management system that is used to back up the host, wherein routing the packet to the storage entity is based at least in part on the source internet protocol address being set to the virtual internet protocol address associated with the host; and
establish a connection between the host and the storage entity based at least in part on routing the packet to the storage entity in accordance with the virtual internet protocol address, wherein the storage entity is configured to provide the backup and recovery services to the host.

11 . The apparatus of claim 10 , wherein the instructions are further executable by the at least one processor to cause the apparatus to:
allocate, at the data management system, the virtual internet protocol address to the host; and select the virtual internet protocol address to set as the source internet protocol address based at least in part on a mapping between the identifier associated with the host and the virtual internet protocol address allocated to the host.

12 . The apparatus of claim 10 , wherein the instructions are further executable by the at least one processor to cause the apparatus to:
instantiate, within the network, a virtual machine configured to create a tunnel for communications between the data management system and the one or more hosts, wherein the packet is received via the tunnel; and allocate, by the virtual machine, the virtual internet protocol address to the host, wherein the packet comprises the virtual internet protocol address when received at the data management system based at least in part on the allocation, and wherein the source internet protocol address is set to be the virtual internet protocol address based at least in part on the packet comprising the virtual internet protocol address.

13 . The apparatus of claim 12 , wherein the identifier associated with the host is the virtual internet protocol address.

14 . The apparatus of claim 10 , wherein the instructions are further executable by the at least one processor to cause the apparatus to:
allocate one or more virtual internet protocol addresses to the one or more hosts, including the virtual internet protocol address to the h

Assignees

• Rubrik Inc

Inventors

• Jaiswal Rajesh Kumar
• Luo Jiangbin
• Du Fan

Classifications

• H04L45/741

  Routing in networks with a plurality of addressing schemes, e.g. with both IPv4 and IPv6 · CPC title

• H04L63/166

  at the transport layer · CPC title

• H04L45/42 Primary

  Centralised routing · CPC title