IP Library Granted Patent US 12676908
Granted Patent B2
US 12676908 · App. 18/761,249 · Granted Jul 7, 2026

Traffic rules for switching routes in cloud-based multi-tenant system

Inventors: Bryan D. Black (Norton Shores, MI); Jacob S. Roersma (Ada, MI)
Assignee: Netskope, Inc.
H04L67/10G06F9/541H04L12/4633H04L63/0272H04L63/0281G06Q10/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12676908
App. No.
18/761,249
Granted
Jul 7, 2026
Kind
B2
Abstract

A method and system for switching routes based on conditions in cloud-based multi-tenant systems is disclosed. Routes delivers services to end user devices. The routes are specified for policies. The policies specify residencies for the routes, cloud services, and data storage. An application running on an end user device selects a policy and a cloud service. A route corresponding to the policy, and the cloud service is returned to the application. An access resource server determines traffic rules to change the route, and changes the route based on conditions including a time of day, utilization, latency or a performance threshold

Claims (57)

1 . A cloud-based multi-tenant system for switching routes according to policies based on conditions, the cloud-based multi-tenant system comprising:

a plurality of routes through the cloud-based multi-tenant system to deliver services to a plurality of end user devices, wherein:

the plurality of routes are distributed to the plurality of end user devices in a plurality of domains,

the plurality of routes terminate with a plurality of cloud services across the Internet,

the plurality of domains separate subsets of the plurality of end user devices for a plurality of tenants,

the plurality of routes are specified for a plurality of policies,

the plurality of policies specifies residencies for the plurality of routes, the plurality of cloud services, and data storage, and

an application running on an end user device of the plurality of end user devices selects:

a policy chosen from the plurality of policies, and

a cloud service from the plurality of cloud services, wherein:

a route of the plurality of routes corresponding to the policy and the cloud service is returned to the application, and

the application communicates via the route between the application and the cloud service; and

an access resource server configured to:

determine traffic rules to change the route; and

change the route based on a plurality of conditions including a time of day, utilization, latency or a performance threshold associated with the access resource server.

2 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 1 , wherein the access resource server is used during a time period in one or more days, or the access resource server receives an amount of traffic before switching the route.

3 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 1 , wherein the traffic rules are a decision tree with decisions and conditionals that switch between the plurality of routes.

4 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 1 , wherein the route includes a point of presence (PoP) address.

5 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 1 , wherein the route uses a tunnel.

6 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 1 , wherein the plurality of routes are dynamically configured according to policy requests at the end user device according to performance, route and/or residency.

7 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 1 , wherein the traffic rules are configured to switch routes for different performance conditions.

8 . A method for switching routes based on conditions in policy-driven traffic management of a cloud-based multi-tenant system, the method comprising:

determining a plurality of routes through the cloud-based multi-tenant system to deliver services to a plurality of end user devices;

distributing the plurality of routes to the plurality of end user devices in a plurality of domains, wherein:

the plurality of routes terminate with a plurality of cloud services across the Internet,

the plurality of domains separate subsets of the plurality of end user devices for a plurality of tenants, and

the routes are specified for a plurality of policies,

receiving from an application running on an end user device of the plurality of end user devices selection of:

a policy chosen from the plurality of policies, and

a cloud service from the plurality of cloud services;

returning a route of the plurality of routes corresponding to the policy and the cloud service;

determining traffic rules to change the route;

changing the route based on a plurality of conditions including a time of day, utilization, latency or a performance threshold associated with an access resource server; and

communicating via the route between the application and the cloud service.

9 . The method for switching routes based on conditions in policy-driven traffic management of the cloud-based multi-tenant system as recited in claim 8 , wherein the access resource server is used during a time period in one or more days, or the access resource server receives an amount of traffic before switching the route.

10 . The method for switching routes based on conditions in policy-driven traffic management of the cloud-based multi-tenant system as recited in claim 8 , wherein the traffic rules are a decision tree with decisions and conditionals that switch between the plurality of routes.

11 . The method for switching routes based on conditions in policy-driven traffic management of the cloud-based multi-tenant system as recited in claim 8 , wherein the route includes a point of presence (POP) address.

12 . The method for switching routes based on conditions in policy-driven traffic management of the cloud-based multi-tenant system as recited in claim 8 , wherein the plurality of routes are dynamically configured according to policy requests at the end user device according to performance, route and/or residency.

13 . The method for switching routes based on conditions in policy-driven traffic management of the cloud-based multi-tenant system as recited in claim 8 , wherein the traffic rules are configured to switch routes for different performance conditions.

14 . A cloud-based multi-tenant system for switching routes according to policies based on conditions, the cloud-based multi-tenant system comprising one or more processors and one or more memories with code for:

determining a plurality of routes through the cloud-based multi-tenant system to deliver services to a plurality of end user devices;

distributing the plurality of routes to the plurality of end user devices in a plurality of domains, wherein:

the plurality of routes terminate with a plurality of cloud services across the Internet,

the plurality of domains separate subsets of the plurality of end user devices for a plurality of tenants, and

the routes are specified for a plurality of policies;

receiving from an application running on an end user device of the plurality of end user devices selection of:

a policy chosen from the plurality of policies, and

a cloud service from the plurality of cloud services;

returning a route of the plurality of routes corresponding to the policy and the cloud service;

determining traffic rules to change the route;

changing the route based on a plurality of conditions including a time of day, utilization, latency or a performance threshold associated with an access resource server; and

communicating via the route between the application and the cloud service.

15 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 14 , wherein the access resource server is used during a time period in one or more days, or the access resource server receives an amount of traffic before switching the route.

16 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 14 , wherein the traffic rules are a decision tree with decisions and conditionals that switch between the plurality of routes.

17 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 14 , wherein the route includes a point of presence (POP) address.

18 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 14 , wherein the plurality of routes are dynamically configured according to policy requests at the end user device according to performance, route and/or residency.

19 . The cloud-based multi-tenant system for switching routes according to policies based on conditions as recited in claim 14 , wherein the traffic rules are configured to switch routes for different performance conditions.