IP Library Granted Patent US 10,111,192
Granted Patent B2
US 10,111,192 · App. 15/171,330 · Granted Oct 23, 2018

Method for effective PMTU discovery in VPN environment

Inventors: Dong Xiang (Shanghai, CN); Yicheng He (Shanghai, CN); Yanjun Yang (Shanghai, CN); Li Zhao (Shanghai, CN)
Assignee: SONICWALL INC.
H04W56/0015H04L12/4633H04L12/4641H04L47/10H04L47/36H04L47/365
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,111,192
App. No.
15/171,330
Granted
Oct 23, 2018
Kind
B2
Abstract

Methods are directed towards initializing a path maximum transmission unit value for two gateways in communication via a network tunnel (e.g., VPN environment). The initialized path maximum transmission unit value is used in establishing the network tunnel of the two gateways. Methods are also directed towards synchronizing path maximum transmission unit values for the two gateways after the network tunnel has been established. These methods minimize the occurrence of dropped data packets arising from mismatched path maximum transmission unit value between the gateways.

Claims (53)

1. A method for path maximum transmission unit discovery, the method comprising:

executing instructions stored in memory by a processor, wherein the instructions are executable to perform tunnel negotiations between a first gateway and a second gateway and the performed tunnel negotiations includes:

calculating maximum transmission unit values for each gateway, and

advertising the calculated maximum transmission unit value, wherein the calculated maximum transmission unit value for the first gateway is advertised to the second gateway and the calculated maximum transmission unit value for the second gateway is advertised to the first gateway;

acknowledging receipt of the advertised maximum transmission unit value by each gateway in the tunnel negotiations;

calculating an initial maximum transmission unit value for use by each of the gateways in the tunnel negotiations, wherein the calculated initial maximum transmission unit value:

specifies characteristics of the data that can be transmitted between the first and the second gateway using a tunnel established by the tunnel negotiations, and

incorporates an associated overhead value for each data packet being transmitted via an established network tunnel;

establishing the network tunnel between the first gateway and the second gateway using the calculated initial maximum transmission unit value; and

transmitting data between the first gateway and the second gateway using the established network tunnel, wherein the transmission of data is based on the calculated initial maximum transmission unit value.

2. The method of claim 1 , further comprising generating an error message associated with a transmitted data packet being received by a gateway when the transmitted data packet has a maximum transmission unit value that is greater than the calculated initial maximum transmission unit value.

3. The method of claim 2 , wherein the generated error message includes an updated maximum transmission unit value associated with the gateway receiving the transmitted data packet, the updated maximum transmission unit value being less than the maximum transmission unit value of the transmitted data packet.

4. The method of claim 3 , wherein the generated error message is provided to another gateway so that the another gateway can re-adjust its own maximum transmission unit value to coincide with the maximum transmission unit value of the gateway that generated the error message, the readjusted maximum transmission unit value being used to re-transmit the data packet that prompted the generated error message.

5. The method of claim 1 , further comprising:

identifying that a maximum transmission unit value of the second gateway has changed to a different value than the initial maximum transmission unit value; and

sending a notification to the second gateway that includes a maximum transmission unit value that the first gateway can currently support.

6. The method of claim 5 , further comprising:

receiving an acknowledgement from the second gateway in response to the notification sent to the second gateway;

updating a maximum transmission unit value at the first gateway to a value that does not exceed the different maximum transmission unit value of the second gateway; and

transmitting data between the first gateway and the second gateway based on the updated maximum transmission unit value.

7. The method of claim 1 , wherein the data transmitted between the first gateway and the second gateway is encrypted.

8. A non-transitory computer-readable storage medium having embodied thereon a program executable by a processor for implementing a method for path maximum transmission unit discovery, the method comprising:

executing instructions stored in memory by a processor, wherein the instructions are executable to perform tunnel negotiations between a first gateway and a second gateway, wherein the performed tunnel negotiations includes:

calculating maximum transmission unit values for each gateway, and

advertising the calculated maximum transmission unit value, wherein the calculated maximum transmission unit value for the first gateway is advertised to the second gateway, and wherein the calculated maximum transmission unit value for the second gateway is advertised to the first gateway;

acknowledging receipt of the advertised maximum transmission unit value by each gateway in the tunnel negotiations;

calculating an initial maximum transmission unit value for use by each of the gateways in the tunnel negotiations, wherein the calculated initial maximum transmission unit value:

specifies characteristics of the data that can be transmitted between the first and the second gateway using a tunnel established by the tunnel negotiations, and

incorporates an associated overhead value for each data packet being transmitted via an established network tunnel;

establishing the network tunnel between the first gateway and the second gateway using the calculated initial maximum transmission unit value; and

transmitting data between the first gateway and the second gateway using the established network tunnel, wherein the transmission of data is based on the calculated initial maximum transmission unit value.

9. An apparatus for path maximum transmission unit discovery, the apparatus comprising:

a processor that executes instructions out of the memory to perform tunnel negotiations between a first gateway and a second gateway via the network interface, wherein the performed tunnel negotiations includes:

calculating maximum transmission unit values for each gateway, and

advertising the calculated maximum transmission unit value, wherein the calculated maximum transmission unit value for the first gateway is advertised to the second gateway and the calculated maximum transmission unit value for the second gateway is advertised to the first gateway;

acknowledging receipt of the advertised maximum transmission unit value by each gateway in the tunnel negotiations; and

calculating an initial maximum transmission unit value for use by each of the gateways in the tunnel negotiations, wherein the calculated initial maximum transmission unit value:

specifies characteristics of the data that can be transmitted between the first and the second gateway using a tunnel established by the tunnel negotiations, and

incorporates an associated overhead value for each data packet being transmitted via an established network tunnel; and

a network interface that:

establishes the network tunnel between the first gateway and the second gateway using the calculated initial maximum transmission unit value, and

transmits data between the first gateway and the second gateway using the established network tunnel, wherein the transmission of data is based on the calculated initial maximum transmission unit value.

10. The apparatus of claim 9 , wherein an error message is generated that is associated with a transmitted data packet being received by a gateway when the transmitted data packet has a maximum transmission unit value that is greater than the calculated initial maximum transmission unit value.

11. The apparatus of claim 10 , wherein the generated error message includes an updated maximum transmission unit value associated with the gateway receiving the transmitted data packet, the updated maximum transmission unit value being less than the maximum transmission unit value of the transmitted data packet.

12. The apparatus of claim 11 , wherein the generated error message is provided to another gateway so that the another gateway can re-adjust its own maximum transmission unit value to coincide with the maximum transmission unit value of the gateway that generated the error message, the readjusted maximum transmission unit value being used to re-transmit the data packet that prompted the generated error message.

13. The apparatus of claim 9 , wherein:

an identification is made that the second gateway has changed its maximum transmission unit value to a different value than the initial maximum transmission unit value, and

a notification is sent to the second gateway that includes a maximum transmission unit value that the first gateway can currently support.

14. The apparatus of claim 13 , wherein:

an acknowledgement is received via the network interface from the second gateway in response to the notification sent to the second gateway;

a maximum transmission unit value at the first gateway is updated to a value that does not exceed the different maximum transmission unit value of the second gateway; and

data between the first gateway and the second gateway is transmitted via the network interface based on the updated maximum transmission unit value.

15. The apparatus of claim 11 , wherein the data transmitted between the first gateway and the second gateway is encrypted.

Assignments (20)
FIRST LIEN IP SUPPLEMENT Recorded Jun 30, 2025
From: SONICWALL US HOLDINGS INC.
To: UBS AG, STAMFORD BRANCH, AS COLLATERAL AGENT
Reel/Frame 071777/0641 →
RELEASE OF SECURITY INTEREST IN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (045455/0001) Recorded May 20, 2022
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO ASAP SOFTWARE EXPRESS, INC.); DELL MARKETING L.P. (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO CREDANT TECHNOLOGIES, INC.); DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL PRODUCTS L.P.; DELL MARKETING CORPORATION (SUCCESSOR-IN-INTEREST TO FORCE10 NETWORKS, INC. AND WYSE TECHNOLOGY L.L.C.); EMC CORPORATION (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MAGINATICS LLC); EMC IP HOLDING COMPANY LLC (ON BEHALF OF ITSELF AND AS SUCCESSOR-IN-INTEREST TO MOZY, INC.); SCALEIO LLC
Reel/Frame 061753/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 9, 2022
From: QUEST SOFTWARE INC.
To: SONICWALL US HOLDINGS INC.
Reel/Frame 059912/0097 →
RELEASE OF SECOND LIEN SECURITY INTEREST IN PATENTS Recorded Feb 2, 2022
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
To: QUEST SOFTWARE INC.
Reel/Frame 059096/0683 →
RELEASE OF FIRST LIEN SECURITY INTEREST IN PATENTS Recorded Feb 2, 2022
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
To: QUEST SOFTWARE INC.
Reel/Frame 059105/0479 →
RELEASE OF SECURITY INTEREST Recorded Nov 3, 2021
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL, L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; WYSE TECHNOLOGY L.L.C.
Reel/Frame 058216/0001 →
CHANGE OF NAME Recorded Jun 19, 2018
From: DELL SOFTWARE INC.
To: QUEST SOFTWARE INC.
Reel/Frame 046393/0009 →
FIRST LIEN PATENT SECURITY AGREEMENT Recorded Jun 7, 2018
From: QUEST SOFTWARE INC.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 046327/0347 →
SECOND LIEN PATENT SECURITY AGREEMENT Recorded Jun 7, 2018
From: QUEST SOFTWARE INC.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 046327/0486 →
RELEASE OF SECURITY INTEREST Recorded Nov 4, 2016
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: AVENTAIL LLC; DELL PRODUCTS, L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION
Reel/Frame 040564/0886 →
RELEASE OF SECURITY INTEREST IN CERTAIN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (040136/0001) Recorded Nov 4, 2016
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
To: DELL PRODUCTS L.P.; AVENTAIL LLC; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION
Reel/Frame 040564/0897 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040134/0001 →
SECURITY AGREEMENT Recorded Sep 21, 2016
From: ASAP SOFTWARE EXPRESS, INC.; AVENTAIL LLC; CREDANT TECHNOLOGIES, INC.; DELL USA L.P.; DELL INTERNATIONAL L.L.C.; DELL MARKETING L.P.; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; DELL SYSTEMS CORPORATION; EMC CORPORATION; EMC IP HOLDING COMPANY LLC; FORCE10 NETWORKS, INC.; MAGINATICS LLC; MOZY, INC.; SCALEIO LLC; SPANNING CLOUD APPS LLC; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 040136/0001 →
RELEASE OF SEC. INT. IN PATENTS (TL) Recorded Sep 14, 2016
From: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
To: AVENTAIL LLC; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.
Reel/Frame 040027/0329 →
RELEASE OF SEC. INT. IN PATENTS (NOTES) Recorded Sep 14, 2016
From: BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS COLLATERAL AGENT
To: AVENTAIL LLC; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.
Reel/Frame 040026/0710 →
RELEASE OF SEC. INT. IN PATENTS (ABL) Recorded Sep 13, 2016
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: AVENTAIL LLC; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.
Reel/Frame 040013/0733 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (TERM LOAN) Recorded Aug 10, 2016
From: AVENTAIL LLC; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 039719/0889 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (ABL) Recorded Aug 10, 2016
From: AVENTAIL LLC; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 039643/0953 →
SUPPLEMENT TO PATENT SECURITY AGREEMENT (NOTES) Recorded Aug 10, 2016
From: AVENTAIL LLC; DELL PRODUCTS L.P.; DELL SOFTWARE INC.; FORCE10 NETWORKS, INC.; WYSE TECHNOLOGY L.L.C.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 039644/0084 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 2, 2016
From: XIANG, DONG; HE, YICHENG; YANG, YANJUN; ZHAO, LI
To: DELL SOFTWARE INC.
Reel/Frame 038783/0585 →
Continuity (1)
Related Publication 20170353935A1 · Dec 7, 2017