IP Library Granted Patent US 12,381,777
Granted Patent B2
US 12,381,777 · App. 17/566,801 · Granted Aug 5, 2025

Distributed node discovery and overlay path management on a data communication network

Inventors: Stephen John Bevan (Auckland, NZ); Dmitry Perets (Bologna, IT)
Assignee: Fortinet, Inc.
H04L41/0806H04L41/12H04L45/64
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,381,777
App. No.
17/566,801
Granted
Aug 5, 2025
Kind
B2
Abstract

An initial provisioning by a management plane of the SD-WAN is received from a centralized SD-WAN gateway with static path overlay between the network edge device on a local LAN and the centralized SD-WAN gateway. At runtime, intelligent decision are made about which overlay path to select and when for the new flow over a control plane of the SD-WAN, based on the topology of the remote network edge and the local SDWAN policy, and to build the selected overlay path.

Claims (11)

1. A network edge device in an SD-WAN (software-defined-wide area network) of a data communication network for dynamic overlay path management at runtime on a control plane of the SD-WAN, the network edge device comprising:

a processor;

a network communication interface, communicatively coupled to the data communication network; and

a memory, communicatively coupled to the processor and storing:

a control module to receive initial provisioning by a management plane of the SD-WAN from a centralized SD-WAN manager with static path overlay between the network edge device on a local LAN and the centralized SD-WAN gateway, wherein the initial provisioning includes a local SD-WAN policy;

an edge discovery module to, responsive to new data flow from a client on the local LAN in real-time, discover a remote network edge device associated with a destination of the new flow and a topology of the remote network edge device having two or more links connecting the remote network edge device to the data communication network, wherein a first link of the two or more links to the remote network edge device comprises an LTE connection and a second link comprises a broadband connection, wherein discovery includes collecting an IP address for IKE (Internet Key Exchange) negotiations and a domain ID to specify a type of underlay transport;

a dynamic path manager to make an intelligent decision about which overlay path to select and when for the new flow over a control plane of the SD-WAN, based on the topology of the remote network edge and the local SD-WAN policy, and to build the selected overlay path.

2. The network edge device of claim 1 , wherein the network edge device comprises a gateway device.

3. The network edge device of claim 1 , wherein the dynamic path manager automatically updates the path selection based on a current health of the path, without additional provisioning.

4. The network edge device of claim 1 , wherein the current health comprises one or more of latency, packet loss and jitter.

5. The network edge device of claim 1 , wherein the centralized SD-WAN gateway administers a plurality of SD-WANs.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 20, 2022
From: BEVAN, STEPHEN JOHN; PERETS, DMITRY
To: FORTINET, INC.
Reel/Frame 058715/0556 →
Continuity (1)
Related Publication 20230216733A1 · Jul 6, 2023
References Cited (42)
US 7447901B1 · Sullenberger · 2008 [cited by examiner]
US 7848335B1 · Kang · 2010 [cited by examiner]
US 10148495B1 · Oczkowski · 2018 [cited by examiner]
US 10938717B1 · Sundararajan · 2021 [cited by examiner]
US 11329883B2 · Zhang · 2022 [cited by applicant]
US 11451484B2 · Bajaj · 2022 [cited by examiner]
US RE49485E · Khan · 2023 [cited by examiner]
US 11824754B2 · Magnezi et al. · 2023 [cited by applicant]
US 20030177221A1 · Ould-Brahim et al. · 2003 [cited by applicant]
US 20100228709A1 · Ahmed · 2010 [cited by examiner]
US 20110004913A1 · Nagarajan et al. · 2011 [cited by applicant]
US 20110219447A1 · Horovitz · 2011 [cited by examiner]
US 20140380460A1 · Bhalerao et al. · 2014 [cited by applicant]
US 20150382198A1 · Kashef · 2015 [cited by examiner]
US 20160261506A1 · Hegde et al. · 2016 [cited by applicant]
US 20170230199A1 · Shen · 2017 [cited by examiner]
US 20190052658A1 · Clarke · 2019 [cited by examiner]
US 20190140955A1 · Hemige · 2019 [cited by examiner]
US 20200042416A1 · Satoyama · 2020 [cited by examiner]
US 20200336464A1 · Hastings · 2020 [cited by applicant]
US 20210036887A1 · Meng · 2021 [cited by examiner]
US 20210067442A1 · Sundararajan · 2021 [cited by examiner]
US 20210160170A1 · Ramaswamy · 2021 [cited by examiner]
US 20210160251A1 · Keisam · 2021 [cited by examiner]
US 20210168125A1 · Vemulpali · 2021 [cited by examiner]
US 20210173578A1 · Jesionowski · 2021 [cited by examiner]
US 20210306247A1 · Duan · 2021 [cited by applicant]
US 20210352151A1 · Gupta · 2021 [cited by examiner]
US 20220103427A1 · Mallipudi · 2022 [cited by examiner]
US 20220191251A1 · Gavish · 2022 [cited by examiner]
US 20220210139A1 · Hetzler · 2022 [cited by examiner]
US 20220232411A1 · Vijayakumar · 2022 [cited by examiner]
US 20220286406A1 · Sethi · 2022 [cited by examiner]
US 20220394014A1 · Wang · 2022 [cited by examiner]
US 20230029882A1 · Hooda · 2023 [cited by examiner]
US 20230059537A1 · Gavand et al. · 2023 [cited by applicant]
US 20230216733A1 · Bevan et al. · 2023 [cited by applicant]
US 20240015529A1 · Xu · 2024 [cited by examiner]
US 20240291760A1 · Duan et al. · 2024 [cited by applicant]
Aruba, SD-WAN Solution, Jul. 2019, Revision 02, pp. 1-316 (Year: 2019). [cited by examiner]
C. Kaufman et al., Internet Key Exchange Protocol Version 2 (IKEv2), Standards Track, Oct. 14, 2014, RFC 7296, 142 pages. [cited by applicant]
F. Audet, Ed. et al., Network Address Translation (NAT) Behavioral Requirements forUnicast UDP, Best Current Practice, Audet & Jennings, Jan. 2007, 29 pages. [cited by applicant]