Smart tunneling to resources in a network
View Patent ↗A client computer hosts a virtual private network tool to establish a virtual private network connection with a remote network. Upon startup, the virtual private network tool collects critical network information for the client computer, and sends this critical network information to an address assignment server in the remote network. The address assignment server compares the critical network information with a pool of available addresses in the remote network, and assigns addresses for use by the client computer that do not conflict with the addresses for local resources. The address assignment server also provides routing information for resources in the remote network to the virtual private network tool. The virtual private network tool will postpone loading this routing information into the routing tables of the client computer until the client computer requests access to a specific resource in the remote network. When the client computer requests access to a specific resource in the remote network, the virtual private network tool will only provide the routing table with the routing information for that specific remote resource.
1. A method of establishing communication between a client computer on a local network and a remote private network, the method comprising:
receiving critical local network information for the client computer on the local network, wherein the critical local network information includes local network addresses of resources in the local network that are available to the client computer;
comparing the received critical local network information with a set of remote network addresses received from the remote private network, wherein the remote network addresses are associated with resources in the remote private network available to the client computer once communication has been established between the client computer on the local network and a remote private network, and wherein the comparison takes place at an address assignment server that identifies at least one remote network address from the set of remote network addresses that does not conflict with any of the local network addresses included in the critical local network information and wherein the at least one remote network address is available for communication with resources in the remote private network;
providing a routing rule to a routing table stored in memory at the client computer, the routing rule used to access the resources in the remote network and the routing rule provided by the address assignment server, the routing rule based on a policy rule for adding information to a routing table;
postponing loading routing information into the routing table until the client requests access to a specific resource in the remote private network; and
in response to the client request, providing only the non-conflicting available remote network address for the specific resource to the routing table for use in communicating with the specific resource in the remote private network.
2. The method of claim 1 , wherein the routing rule is based on a policy rule for controlling how routing information associated with the routing rule is added to the routing table.
3. The method of claim 1 , wherein the routing rule includes a resource identifier value that is an IP address that identifies a resource in the remote network.
4. The method of claim 1 , wherein the routing table includes a resource identifier value that is a domain name that identifies a resource in the remote network.
5. A method of establishing communication between a client computer on a local network and a remote private network, the method comprising:
collecting critical local network information for the client computer on the local network, wherein the critical local network information includes local network addresses of resources in the local network that are available to the client computer;
providing the critical local network information to an address assignment server located in the remote private network for comparison with a set of remote network addresses in the remote private network to identify at least one remote network address that does not conflict with any of the local network addresses included in the critical local network information and wherein the at least one remote network address is available for communication with resources in the remote private network;
receiving the at least one non-conflicting available remote network address from the address assignment server;
providing a routing rule to a routing table stored in memory at the client computer, the routing rule used to access the resources in the remote network and the routing rule provided by the address assignment server, the routing rule based on a policy rule for adding information to a routing table;
postponing loading routing information into the routing table until the client requests access to a specific resource in the remote network;
in response to the client request, providing only the non-conflicting available remote network address for the specific resource to the routing table; and
employing the non-conflicting available remote network address to communicate with the specific resource in the remote private network.
6. An address assignment server system, the system comprising:
a database accessible to an address assignment server and having stored thereon a set of remote network addresses, the remote network addresses associated with resources located in a remote private network that is remote from a client computer requesting to communicate with resources in the remote private network; and
an address assignment server in the remote private network, wherein the address assignment server:
receives critical local network information from the client computer wherein the critical local network information includes local network addresses of resources in the local network that are available to the client computer,
compares the received critical local network information with the set of remote network addresses to identify at least one available remote network address that does not conflict with any of the local network addresses included in the critical local network information and wherein the at least one remote network address is available for communication with resources in the remote private network,
provides a routing rule to a routing table stored in memory at the client computer, the routing rule used to access the resources in the remote network and the routing rule based on a policy rule for adding information to a routing table;
postpones loading routing information into the routing table until the client requests access to a specific resource in the remote network;
and
in response to the client request, provides only the non-conflicting available remote network address for the specific resource to the routing table for communicating with the specific resources in the remote private network.