Method, apparatus, and computer-readable storage medium for network optimization for accessing cloud service from on-premises network

1. A method, comprising:

receiving, by a hybrid gateway, a first packet, the first packet including a first source Internet protocol (IP) address and a first destination IP address;

adding, by the hybrid gateway, a first outer header to the first packet to generate an encapsulated packet, the first outer header including a second source IP address and a second destination IP address;

forwarding, by the hybrid gateway, the encapsulated packet to a Server Load Balancer (SLB) associated with the second destination IP address;

receiving, by the hybrid gateway, a response packet directly from a front end server having a front end server private IP address;

saving, by the hybrid gateway, the front end server private IP address to bypass the SLB;

receiving, by the hybrid gateway, a second packet, the second packet including the first source IP address and the first destination IP address;

adding, by the hybrid gateway, a second outer header to the second packet to generate a bypass packet, the second outer header including a third source IP address and a third destination IP address, the third destination IP address being the front end server private IP address; and

forwarding, by the hybrid gateway, the bypass packet to the front end server associated with the front end server private IP address to bypass the SLB.

2. The method of claim 1 , wherein adding the first outer header to the first packet is performed based on virtual extensible local area network (VXLAN) encapsulation.

3. The method of claim 2 , wherein the first outer header further includes a VXLAN identification (ID), the second source IP address being a hybrid gateway private IP address, the second destination IP address being a SLB private IP address.

4. The method of claim 1 , wherein the first packet is sent from an on-premises network, the first source IP address being a private IP address of the on-premises network, the first destination IP address being an IP address of cloud service.

5. The method of claim 1 , wherein the front end server private IP address is saved in a session table.

6. The method of claim 1 , wherein after forwarding the encapsulated packet to the SLB, the method further comprises:

receiving, by the SLB, the encapsulated packet;

selecting, by the SLB, the front end server associated with the front end server private IP address;

replacing the second destination IP address of the encapsulated packet with the front end server private IP address to generate a modified packet; and

forwarding the modified packet to the front end server.

7. An apparatus, comprising:

one or more processors;

memory coupled to the one or more processors, the memory storing computer-readable instructions executable by the one or more processors that when executed by the one or more processors, cause the one or more processors to perform acts comprising:

receiving, by a hybrid gateway, a first packet, the first packet including a first source Internet protocol (IP) address and a first destination IP address;

adding, by the hybrid gateway, a first outer header to the first packet to generate an encapsulated packet, the first outer header including a second source IP address and a second destination IP address;

forwarding, by the hybrid gateway, the encapsulated packet to a Server Load Balancer (SLB) associated with the second destination IP address;

receiving, by the hybrid gateway, a response packet directly from a front end server having a front end server private IP address;

saving, by the hybrid gateway, the front end server private IP address to bypass the SLB;

receiving, by the hybrid gateway, a second packet, the second packet including the first source IP address and the first destination IP address;

adding, by the hybrid gateway, a second outer header to the second packet to generate a bypass packet, the second outer header including a third source IP address and a third destination IP address, the third destination IP address being the front end server private IP address; and

forwarding, by the hybrid gateway, the bypass packet to the front end server associated with the front end server private IP address to bypass the SLB.

8. The apparatus of claim 7 , wherein adding the first outer header to the first packet is performed based on virtual extensible local area network (VXLAN) encapsulation.

9. The apparatus of claim 8 , wherein the first outer header further includes a VXLAN identification (ID), the second source IP address being a hybrid gateway private IP address, the second destination IP address being a SLB private IP address.

10. The apparatus of claim 7 , wherein the first packet is sent from an on-premises network, the first source IP address being a private IP address of the on-premises network, the first destination IP address being an IP address of cloud service.

11. The apparatus of claim 7 , wherein the front end server private IP address is saved in a session table.

12. The apparatus of claim 7 , wherein after forwarding the encapsulated packet to the SLB, the method further comprises:

receiving, by the SLB, the encapsulated packet;

selecting, by the SLB, the front end server associated with the front end server private IP address;

replacing the second destination IP address of the encapsulated packet with the front end server private IP address to generate a modified packet; and

forwarding the modified packet to the front end server.

13. A computer-readable storage medium storing computer-readable instructions executable by one or more processors, that when executed by the one or more processors, cause the one or more processors to perform acts comprising:

receiving, by a hybrid gateway, a first packet, the first packet including a first source Internet protocol (IP) address and a first destination IP address;

adding, by the hybrid gateway, a first outer header to the first packet to generate an encapsulated packet, the first outer header including a second source IP address and a second destination IP address;

forwarding, by the hybrid gateway, the encapsulated packet to a Server Load Balancer (SLB) associated with the second destination IP address;

receiving, by the hybrid gateway, a response packet directly from a front end server having a front end server private IP address;

saving, by the hybrid gateway, the front end server private IP address to bypass the SLB;

receiving, by the hybrid gateway, a second packet, the second packet including the first source IP address and the first destination IP address;

adding, by the hybrid gateway, a second outer header to the second packet to generate a bypass packet, the second outer header including a third source IP address and a third destination IP address, the third destination IP address being the front end server private IP address; and

forwarding, by the hybrid gateway, the bypass packet to the front end server associated with the front end server private IP address to bypass the SLB.

14. The computer-readable storage medium of claim 13 , wherein adding the first outer header to the first packet is performed based on virtual extensible local area network (VXLAN) encapsulation.

15. The computer-readable storage medium of claim 14 , wherein the first outer header further includes a VXLAN identification (ID), the second source IP address being a hybrid gateway private IP address, the second destination IP address being a SLB private IP address.

16. The computer-readable storage medium of claim 13 , the first packet is sent from an on-premises network, the first source IP address being a private IP address of the on-premises network, the first destination IP address being an IP address of cloud service.

17. The computer-readable storage medium of claim 13 , wherein the front end server private IP address is saved in a session table.