IP Library › Granted Patent US 12,316,540
Granted Patent B1
US 12,316,540 · App. 17/859,998 · Granted May 27, 2025

Private management of multi-cloud overlay network

Inventors: Nicolas Delecroix (Menlo Park, CA); Li Yan (Santa Clara, CA); Spencer Witkin (Santa Clara, CA); Saad Mirza (Murphy, TX)
Assignee: Aviatrix Systems, Inc.
H04L45/64H04L12/66H04L41/044H04L41/08H04L43/08H04L63/0272
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,316,540
App. No.
17/859,998
Filed
Jul 7, 2022
Granted
May 27, 2025
Kind
B1
Art Unit
2447
USPC
709/221
Abstract

A multi-cloud overlay network for supporting communications between a first public cloud network and a second public cloud network. The overlay network features a management virtual private network, which includes a network load balancing (NLB) component and a controller registered as a target on a port of the NLB component. The overlay network further includes one or more spoke or transit gateways and a multi-cloud access virtual private cloud (VPC) operating within the first public cloud network, and a remote cloud load balancer component operating the second public cloud network. The remote cloud load balancer component is communicatively coupled between the multi-cloud access VPC and one or more remote spoke or transit gateways. The multi-cloud access VPC includes a VPC endpoint that is assigned a private IP address and communicatively coupled to the NLB component and a virtual private network (VPN) gateway communicatively coupled to a private transport.

Claims (31)

1. A multi-cloud overlay network comprising a controller positioned within a first public cloud network, the multi-cloud overlay network configured for supporting communications using private network addresses between virtual networking infrastructures residing in different public cloud networks, comprising:

a management virtual private cloud network operating within a first public cloud network, the management virtual private cloud network including a network load balancing (NLB) component having a private IP address, wherein the controller is registered as a target on a first port of the NLB component;

one or more spoke gateways operating within a first public cloud network, the one or more spoke gateways is configured to provide an ingress point and an egress point for network traffic propagated over the multi-cloud overlay network from resources within a first public cloud network; and

a multi-cloud access virtual private cloud network including an endpoint that is assigned a private IP address and communicatively coupled to the NLB component and a virtual private network (VPN) gateway communicatively coupled to a private transport that establishes a communicative coupling to one or more remote spoke gateways operating in a second public cloud network,

wherein each of the virtual private cloud networks is associated with a unique private network address range and each cloud component in the virtual private cloud networks is associated with a unique private network address, and

wherein the multi-cloud overlay network is configured to facilitate two-way communications initiated from one or more of the controller and a spoke gateway of the one or more spoke gateways.

2. The multi-cloud overlay network of claim 1 further comprising:

a remote cloud load balancer component communicatively coupled between the multi-cloud access virtual private cloud network (VPC) and the one or more remote spoke gateways, the one or more remote spoke gateways provide an ingress point and an egress point for network traffic propagated over the multi-cloud overlay network from resources within the second public cloud network different than the first public cloud network.

3. The multi-cloud overlay network of claim 2 , wherein the remote cloud load balancer component is deployed within a remote load balancing virtual public cloud network that is communicatively between the VPN gateway of the multi-cloud access VPC and a virtual network gateway deployed within the remote load balancing virtual public cloud component.

4. The multi-cloud overlay network of claim 1 further comprising:

one or more transit gateways configured to assist in a routing of a message from the one or more spoke gateways to the one or more remote spoke gateways.

5. The multi-cloud overlay network of claim 1 , wherein the controller provisions and manages operability of the one or more spoke gateways and the one or more remote spoke gateways.

6. The multi-cloud overlay network of claim 1 , wherein the management virtual private cloud network further comprises a multi-cloud visibility instance registered as a target on a second port of the NLB component, the multi-cloud visibility instance is configured to conduct network health monitoring by at least conducting analytics on the network traffic propagated through the first public cloud network.

7. The multi-cloud overlay network of claim 6 , wherein the controller is configured to (i) create a regional load balancer component communicatively coupled to a first spoke gateway of the one or more spoke gateways situated in a first region different than a second region in which the controller resides, (ii) set up a communicative coupling between the regional load balancer component and the management virtual private cloud network, (iii) install the regional load balancer component, and (iv) registers itself and the multi-cloud visibility instance as targets.

8. The multi-cloud overlay network of claim 1 , wherein the one or more spoke gateways include at least a first spoke gateway situated within a first region associated with a public cloud network and at least a second spoke gateway is deployed within a second region associated with the public cloud network.

9. The multi-cloud overlay network of claim 7 , wherein the second spoke gateway is configured to be communicatively coupled to an endpoint that is communicative coupled to a regional load balancer component, the regional load balancer component is communicatively coupled to the management virtual private cloud network.

10. A method for establishing a control plane being part of a multi-cloud overlay network including a controller positioned within a first public cloud network, the method comprising:

launching the controller;

creating a network load balancing (NLB) component assigned a first private network address;

registering the controller as a target component of the NLB component;

creating a virtual private cloud network including a plurality of networking gateways and an endpoint being assigned a second private network address; and

passing connectivity information associated with the NLB component to each of the plurality of networking gateways so that, during launch, each of the plurality of networking gateways is communicatively coupled to the NLB component.

11. The method of claim 10 , wherein the plurality of networking gateways includes a plurality of spoke gateways or a plurality of transit gateways.

12. The method of claim 10 further comprising:

establishing communications over a control plane between the first public cloud network and a second public cloud network by at least (i) creating a multi-cloud access virtual private cloud network including an endpoint to be communicatively coupled to the NLB component and assigned a third private network address, (ii) launching a load balancer component operating within the second public cloud network and assigned a fourth private network address, and (iii) establishing communications between the load balancer component and the endpoint of the multi-cloud access virtual private cloud network.

13. The method of claim 12 , wherein prior to establishing the communications between the load balancer component and the endpoint of the multi-cloud access virtual private cloud network, the method further comprising:

registering a proxy server as a target to the load balancer component operating within the second public cloud network, the proxy server being assigned a fifth private network address; and

creating a virtual private cloud network for a plurality of networking gateways associated with the second public cloud network.

14. The method of claim 13 , wherein the establishing of the communications between the load balancer component and the endpoint of the multi-cloud access virtual private cloud network further comprises:

creating an endpoint associated with the plurality of networking gateways residing within the second public cloud network and assigning a sixth private network address to the endpoint; and

communicatively coupling the endpoint associated with the plurality of networking gateways to the load balancer component of the second public cloud network.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 7, 2022
From: DELECROIX, NICOLAS; YAN, LI; WITKIN, SPENCER; MIRZA, SAAD
To: AVIATRIX SYSTEMS, INC.
Reel/Frame 060456/0349 →
References Cited (1)
US 20160105392A1 · Thakkar · 2016 [cited by examiner]
Cited By (5)
US 12,592,890 US 12,592,917 US 12,592,931 US 12,726,381 US 12,732,396