Methods and apparatus for providing a secure overlay network between clouds
A process capable of automatically establishing a secure overlay network (“SON”) across different clouds is disclosed. The process, in one aspect, receives a first request from a first node in a first cloud for establishing a SON. After receiving a second request for connecting to the SON from a second node in a second cloud, a first connection is established connecting between the first node and the second node utilizing a network security protocol such as Internet Protocol Security (“IPSec”). After receiving a third request for connecting to the SON from a third node in a third cloud, a second connection is used to connect between the first node and the third node. A third connection is used to connect between the second node and the third node. Each subsequent request for connecting to the SON from a new node results in new connections between the new node and each existing node in the SON forming a full-mesh.
1. A method for providing an overlay network between nodes situated in multiple clouds via an existing network comprising:
receiving a first request from a first dashboard managed by an orchestrator situated in a network for establishing a secure overlay network (“SON”) between a first node in a first cloud and a second node in a second cloud over at least a portion of the existing network;
verifying a first cloud interface between the orchestrator and the first cloud, and a second cloud interface between the orchestrator and the second cloud over the existing network; and
establishing a first SON between a first port of the first node in the first cloud and a second port of the second node in the second cloud via the first and second cloud interfaces through at least a portion of the existing network.
2. The method of claim 1 , wherein the establishing the first SON includes facilitating a point-to-point connection from the first node in the first cloud to the second node in the second cloud via at least one pre-existing connection.
3. The method of claim 1 , further comprising receiving a second request from a second dashboard managed by the orchestrator for establishing a second SON able to facilitate a point-to-point connection between a third node in a third cloud and a fourth node in a fourth cloud over an existing network.
4. The method of claim 3 , further comprising verifying a third cloud interface between the orchestrator and the third cloud, and a fourth cloud interface between the orchestrator and the fourth cloud over the existing network.
5. The method of claim 4 , further comprising establishing the second SON between the third node and the fourth node via the third and fourth cloud interfaces through the existing network.
6. The method of claim 1 , wherein the receiving a first request from a first dashboard further includes providing a dashboard over a browser to interact with a user for facilitating a plurality of user selections before launching a virtual machine (“VM”).
7. The method of claim 1 , wherein receiving a first request from a first dashboard includes receiving an option selected by a first user via a dashboard facilitated for launching a virtual network.
8. The method of claim 1 , wherein receiving a first request from a first dashboard includes receiving a SON selection from a user via the first node from a private cloud.
9. The method of claim 1 , wherein receiving a first request from a first dashboard managed by an orchestrator situated in an orchestrator network for establishing a secure overlay network (“SON”) between a first node in a first cloud and a second node in a second cloud includes receiving a SON selection from a user via a node from a public cloud.
10. The method of claim 1 , wherein establishing the first SON between the first port of the first node in the first cloud and the second port of the second node in second cloud includes creating a logical link between the first port and the second port utilizing Internet Protocol Security (“IPsec”) to build a secure packet exchange tunnel at IP layer.
11. The method of claim 1 , wherein establishing the first SON between the first port of the first node in the first cloud and the second port of the second node in second cloud includes generating a direct connection between a port of a server in a private cloud and a port of virtual machine (“VM”) in a public cloud utilizing an Internet Protocol Security (“IPSec”).
12. An apparatus capable of providing an overlay network between nodes situated in different clouds via existing network communications, comprising:
a first cloud, having one or more servers coupling to an existing network, containing a plurality of internal nodes connected by a plurality of first internal connections;
a second cloud, having one or more servers coupling to the existing network, coupled to the first cloud via the existing network and configured to have a plurality of internal nodes connected by a plurality of second internal connections; and
an orchestrator, having one or more processors coupling to an existing network, situated in a third cloud and coupled to the first and the second clouds via at least one pre-existing connection of the existing network, wherein the orchestrator includes a receiver configured to receive a request for a secure overlay network (SON) from a first internal node inside the first cloud to a second internal node inside the second cloud.
13. The apparatus of claim 12 , wherein the orchestrator further includes a SON manager device configured to create the requested SON as an overlay network over the pre-existing network.
14. The apparatus of claim 13 , wherein the SON is a point-to-point logically direct connection from the first internal node in the first cloud to the second internal node in the second cloud.
15. The apparatus of claim 14 , wherein the SON manager device is further configured to create the SON in accordance with a network security protocol.
16. The apparatus of claim 15 , wherein the network security protocol is IPSec.
17. The apparatus of claim 12 , wherein the orchestrator is able to scale up capacity based on performance of virtual network.
18. The apparatus of claim 12 , wherein the existing network is a virtual private network.
19. The apparatus of claim 12 , wherein the first cloud, the second cloud, and the third cloud are located in different geographical locations.
20. A method for providing an overlay network between nodes situated in multiple clouds via existing network, comprising:
receiving a request from a dashboard managed by an orchestrator situated in a network for establishing a secure overlay network (“SON”) able to facilitate a point-to-point connection between a first node in a private cloud and a second node in a public cloud via at least a portion of a pre-existing network;
verifying a private cloud interface between the orchestrator and the private cloud, and a public cloud interface between the orchestrator and the public cloud over the pre-existing network; and
launching the SON between the first node and the second node via the cloud interfaces utilizing at least a portion of the pre-existing network.