Granted Patent B2

US 7,643,484 · App. 11/053,770 · Granted Jan 5, 2010

Abstract

Claims (13)

1. A network, comprising:

a private network link;

a first federation, coupled to said private network link, being associated with a first private subnet and including a first plurality of servers, each server having a corresponding one of a plurality of local addresses;

a second federation, coupled to said private network link, being associated with a second private subnet and including a second plurality of servers, each server of said second plurality of servers being a copy of a corresponding one of said first plurality of servers and including a corresponding one of said plurality of local addresses;

a plurality of first network abstraction and isolation layer (NAIL) rules-based federation and masquerading (RBFM) interfaces, each interfacing a corresponding one of said first plurality of servers to said private network link, and each performing an address transformation to associate said corresponding server into said first private subnet; and

a plurality of second NAIL RBFM interfaces, each interfacing a corresponding one of said second plurality of servers to said private network link, and each performing an address transformation to associate said corresponding server into said second private subnet.

2. The network of claim 1 , wherein each NAIL RBFM interface is operative to identify outgoing traffic to another server within a common one of said first and second federations, to transform source and destination addresses of said outgoing traffic, and to pass said transformed traffic onto said private network link.

3. The network of claim 1 , wherein each NAIL RBFM interface is operative to identify incoming traffic on said private network link from another server within a common one of said first and second federations, to transform source and destination addresses of said incoming traffic, and to pass transformed traffic to said corresponding server.

4. The network of claim 1 , wherein said address transformation comprises modifying at least one bit of an address.

5. The network of claim 1 , wherein said address transformation comprises a lookup transformation.

6. The network of claim 1 , wherein said address transformation comprises substituting a prefix of an internet protocol (IP) address.

7. The network of claim 1 , wherein said address transformation comprises replacing an address.

8. The network of claim 1 , wherein each of said first and second NAIL RBFM interfaces selectively blocks communications between said first and second federations.

Assignments (35)