System and method for using data encapsulation in a virtual network
A method of extending the functionality of a virtual network is disclosed. Messages intended for a virtual destination address located on a network equipped with a device performing packet filtering, network address translation or a similar function on the edge of the network (an “edge device”), are encapsulated in higher level protocols prior to being sent to the edge device. The virtual destination address may be associated with a process on the edge device or a process on another device in the interior of the network. Higher level protocol designations, including transport protocol designations accompanied by a port number and application protocol designations, are retrieved from an extended virtual address registration. Messages arriving at the edge device are determined by the Network layer to contain a higher level protocol and are passed up the Internet Protocol model stack to a higher layer. The higher layers of the edge device, such as the Transport layer and the Application layer, may be accessible and therefore configurable to a non-Systems Administrator thus allowing the message to reach the intended virtual destination address.
1. In a network with a virtual address resolution facility and a supported virtual network, said virtual address resolution facility used to resolve a virtual IP address into a real IP address, a method for sending messages between virtual IP addresses, comprising the steps of:
registering a virtual address destination with said virtual address resolution facility, said registration indicating a real IP address, a port number, a transport protocol designation, and an Application layer protocol designation;
resolving said virtual address destination using said virtual address resolution facility into a real IP address destination;
determining a transport protocol to encapsulate a message based upon a transport protocol designation in said virtual address destination registration and to add a transport protocol header to said message;
formatting said message to be compatible with said Application layer protocol designation in said virtual address destination registration;
resolving said real IP address destination to determine a media access control (MAC) address destination; and
sending said formatted message, augmented by said determined MAC address destination, said real IP address destination and said transport protocol header, from a virtual IP address to the real IP address destination indicated in said virtual address destination registration.
2. The method of claim 1 , comprising the further step of:
encapsulating said message in the transport protocol specified in said registration prior to sending said message.
3. The method of claim 1 wherein said virtual address destination is behind one of a firewall, NAT box, proxy server, packet filtering device, and gateway.
4. The method of claim 1 wherein a process associated with the sending virtual IP address is located on an electronic device outside a firewall and said virtual address destination is located inside the firewall.
5. The method of claim 4 wherein said virtual address resolution facility is located on a different electronic device located outside the firewall than the sending process.
6. The method of claim 1 wherein said real IP address is associated with a proxy server.
7. The method of claim 1 , comprising the further step of:
using secure socket layers to send said message to said virtual address destination.
8. The method of claim 1 , comprising the further step of:
using at least one of the User Datagram Protocol (UDP), Transmission Control Protocol (TCP) X.25, XTP, and AppleTalk to send said message to said virtual address destination.
9. In a network with a virtual address resolution facility and a supported virtual network, said virtual address resolution facility used to resolve a virtual IP address into a real IP address, a method for sending messages between virtual IP addresses, comprising the steps of:
resolving a virtual address destination using said virtual address resolution facility into a real IP address destination, said virtual address resolution facility holding a real IP address, a port number, a transport protocol designation, and an Application layer protocol designation associated with said virtual address destination;
determining a transport protocol to encapsulate a message based upon a transport protocol designation in said virtual address destination registration and to add a transport protocol header to said message;
formatting said message to be compatible with said Application layer protocol designation in said virtual address destination registration;
resolving said real IP address destination to determine a media access control (MAC) address destination; and
sending said formatted message, augmented by said determined MAC address destination, said real IP address destination and said transport protocol header, from the virtual IP address to the real IP address destination associated with said virtual address destination.
10. The method of claim 9 , comprising the further step of:
encapsulating said message in the transport protocol associated with said virtual address destination prior to sending said message.
11. The method of claim 9 , wherein said virtual address resolution facility also holds the address of a reflecting agent, said reflecting agent being located outside a Network Address Translation (NAT) box that both the virtual address destination and virtual address said message is originating from are located behind, comprising the further steps of: sending said message to said virtual address destination via said NAT box and said reflecting agent.
12. In a network with a virtual address resolution facility and a supported virtual network, said virtual address resolution facility used to resolve a virtual IP address into a real IP address, a non-transitory medium holding computer-executable steps for a method for sending messages between virtual IP addresses, said method comprising the steps of:
receiving a registration request at said virtual address resolution facility, said registration request associating a virtual address destination with a real IP address, a port number, a transport protocol designation and an Application layer protocol designation;
storing said associations with said virtual address resolution facility;
receiving a resolution request, said resolution request including a virtual address destination;
resolving said virtual address destination using said virtual address resolution facility and the stored associations into a real IP address destination;
determining a transport protocol to encapsulate a message based upon a transport protocol designation in said virtual address destination registration and to add a transport protocol header to said message;
resolving said real IP address destination to determine a media access control (MAC) address destination; and
formatting said message to be compatible with said Application layer protocol designation in said virtual address destination registration, and augmenting said formatted message by said determined MAC address destination, said real IP address destination and said transport protocol header.
13. In a network with a virtual address resolution facility and a supported virtual network, said virtual address resolution facility used to resolve a virtual IP address into a real IP address; a non-transitory medium holding computer-executable steps for a method for sending a message from an electronic device within the virtual network to another electronic device within the virtual network, said method comprising the steps of:
registering a virtual address destination of said another electronic device with said virtual address resolution facility, said registration indicating a real IP address, a port number, a transport protocol designation, and an Application layer designation;
determining a transport protocol to encapsulate a message based upon a transport protocol designation in said virtual address destination registration and to add a transport protocol header to said message;
formatting said message to be compatible with said Application layer protocol designation in said virtual address destination registration;
resolving said real IP address destination to determine a media access control (MAC) address destination; and
receiving said formatted message, augmented by said determined MAC address destination, and said transport protocol header, at said real IP address indicated in said virtual address destination registration.
14. The medium of claim 13 wherein said message is encapsulated in the transport protocol designated in the registration prior to receipt of said message.
15. The medium of claim 13 wherein said real IP address is associated with a proxy server.
16. The medium of claim 13 wherein said method comprises the further steps of:
forwarding said message to a process associated with said virtual address destination.