Media proxy having interface to multiple virtual private networks
View Patent ↗A VPN media proxy for communication between VPNs and external networks having different addressing schemes, has interfaces to the two or more VPNs, a configuration store, and an address translator arranged to translate the source and destination address of the information based on the configuration. Sharing of the proxy by many VPNs can keep costs down or enable more VPNs to be provided. A call server also shared by the VPNs is used to set up the session and to establish the configuration. The proxy can have an address within each VPN so that it appears to be a dedicated resource for each VPN.
1. A method for interfacing a virtual private network (VPN) with a network having a different addressing scheme, the method comprising:
at a VPN media proxy having a communications interface for communicating with a first network and a second network, wherein the first network comprises a plurality of interconnected VPNs, the second network is connected to the plurality of interconnected VPNs via the first network, and the second network uses an Internet protocol (IP) addressing scheme different from a private IP network addressing scheme used by one of the plurality of interconnected VPNs:
providing a plurality of virtual routing functions, respective ones of the plurality of virtual routing functions being connected to respective ones of the plurality of interconnected VPNs such that each virtual routing function has an address in a private IP address space of a respective one of the plurality of interconnected VPNs;
translating a destination IP address of a packet in accordance with the IP network addressing scheme of the second network; and
forwarding the packet from a source IP address in the one of the plurality of interconnected VPNs to the destination IP address in the second network.
2. The method of claim 1 further comprising:
translating a second destination IP address of a second packet in accordance with the IP network addressing scheme of the one of the plurality of interconnected VPNs; and
forwarding the second packet from a second source IP address in the second network to the second destination IP address in the one of the plurality of interconnected VPNs.
3. The method of claim 1 wherein address translation is provided for each of the plurality of virtual routing functions.
4. The method of claim 1 wherein the first network is a public network using a public IP network addressing scheme and the second network is a carrier network using a private IP network addressing scheme.
5. The method of claim 1 wherein another of the plurality of interconnected VPNs uses a second private IP network addressing scheme, the second private IP network addressing scheme utilizing an address, the address also being utilized by the private IP network addressing scheme used by the one of the plurality of interconnected VPNs.
6. The method of claim 1 wherein the packet comprises voice over Internet protocol (VoIP) signaling information.
7. The method of claim 1 wherein the packet comprises voice over Internet protocol (VoIP) bearer information.
8. The method of claim 1 wherein the second network interfaces the first network to a switched telephone network (STN) via a trunk gateway, the trunk gateway having the destination IP address.
9. The method of claim 8 wherein the STN is a public STN (PSTN).
10. The method of claim 1 further comprising storing configuration information for a session to be established between an entity in the one of the plurality of interconnected VPNs and an entity in the second network.
11. The method of claim 10 wherein the configuration information comprises source and destination IP addresses for the entity in the one of the plurality of interconnected VPNs and the entity in the second network.
12. The method of claim 10 wherein the session comprises a voice over Internet protocol (VoIP) session.
13. A virtual private network (VPN) media proxy for interfacing a VPN with a network having a different addressing scheme, the VPN media proxy comprising:
a communications interface for communicating with a first network and a second network, wherein the first network comprises a plurality of interconnected VPNs, the second network is connected to the plurality of interconnected VPNs via the first network, and the second network uses an Internet protocol (IP) addressing scheme different from a private IP network addressing scheme used by one of the plurality of interconnected VPNs;
a routing module for providing a plurality of virtual routing functions, respective ones of the plurality of virtual routing functions being connected to respective ones of the plurality of interconnected VPNs such that each virtual routing function has an address in a private IP address space of a respective one of the plurality of interconnected VPNs;
an address translation module for translating a destination IP address of a packet in accordance with the IP network addressing scheme of the second network; and
a communications module for forwarding the packet from a source IP address in the one of the plurality of interconnected VPNs to the destination IP address in the second network.
14. The VPN media proxy of claim 13 wherein the address translation module is configured to translate a second destination IP address of a second packet in accordance with the IP network addressing scheme of the one of the plurality of interconnected VPNs and wherein the communications module is configured to forward the second packet from a second source IP address in the second network to the second destination IP address in the one of the plurality of interconnected VPNs.
15. The VPN media proxy of claim 13 wherein the address translation module is configured to provide address translation for each of the plurality of virtual routing functions.
16. The VPN media proxy of claim 13 wherein the first network is a public network using a public IP network addressing scheme and the second network is a carrier network using a private IP network addressing scheme.
17. The VPN media proxy of claim 13 wherein another of the plurality of interconnected VPNs uses a second private IP network addressing scheme, the second private IP network addressing scheme utilizing an address, the address also being utilized by the private IP network addressing scheme used by the one of the plurality of interconnected VPNs.
18. The VPN media proxy of claim 13 wherein the packet comprises voice over Internet protocol (VoIP) signaling information.
19. The VPN media proxy of claim 13 wherein the packet comprises voice over Internet protocol (VoIP) bearer information.
20. The VPN media proxy of claim 13 wherein the second network interfaces the first network to a switched telephone network (STN) via a trunk gateway, the trunk gateway having the destination IP address.
21. The VPN media proxy of claim 20 wherein the STN is a public STN (PSTN).
22. The VPN media proxy of claim 13 further comprising a configuration store for storing configuration information for a session to be established between an entity in the one of the plurality of interconnected VPNs and an entity in the second network.
23. The VPN media proxy of claim 22 wherein the configuration information comprises source and destination IP addresses for the entity in the one of the plurality of interconnected VPNs and the entity in the second network.
24. The VPN media proxy of claim 22 wherein the session comprises a voice over Internet protocol (VoIP) session.
25. A non-transitory computer readable medium comprising computer executable instructions that when executed by a processor of a computer perform steps comprising:
at a VPN media proxy having a communications interface for communicating with a first network and a second network, wherein the first network comprises a plurality of interconnected VPNs, the second network is connected to the plurality of interconnected VPNs via the first network, and the second network uses an Internet protocol (IP) addressing scheme different from a private IP network addressing scheme used by one of the plurality of interconnected VPNs:
providing a plurality of virtual routing functions, respective ones of the plurality of virtual routing functions being connected to respective ones of the plurality of interconnected VPNs such that each virtual routing function has an address in a private IP address space of a respective one of the plurality of interconnected VPNs;
translating a destination IP address of a packet in accordance with the IP network addressing scheme of the second network; and
forwarding the packet from a source IP address in the one of the plurality of interconnected VPNs to the destination IP address in the second network.