Private virtual network replication of cloud databases
A network device communication system can configure network devices (e.g., a primary and secondary database) to send and receive sequences messages, such as replication data, over a channel comprising a plurality of private network nodes. The messages can be generated and encrypted using one or more key pairs and changing wrapping replication keys to send and receive the messages between different types of database deployments.
1. A method comprising:
identifying, by a first virtual cloud network site, a virtual private network connected to the first virtual cloud network site and a second virtual cloud network site, the first virtual cloud network site being in a first geographic region and the second virtual cloud network site being in a second geographic region, the virtual private network comprising a first node in the first geographic region and a second node in the second geographic region;
generating, by the first virtual cloud network site, database items to be transmitted to the second virtual cloud network site;
determining that the database items are for transmission to the second virtual cloud network site through the virtual private network; and
in response to determining that the database items are for transmission to the second virtual cloud network site, exporting, by the first virtual cloud network site, the database items to the virtual private network for transmission to the second virtual cloud network site, the database items being transmitted to the second virtual cloud network site using the first node and the second node of the virtual private network.
2. The method of claim 1 , further comprising:
generating additional database items by the first virtual cloud network site;
determining that the additional database items are for transmission to a third virtual cloud network site; and
in response to determining that the additional database items are for transmission to the third virtual cloud network site, transmitting the additional database items over the Internet.
3. The method of claim 2 , wherein the additional database items are transmitted over the Internet not using the virtual private network.
4. The method of claim 2 , wherein the additional database items are encrypted and transmitted over the Internet using Transport Security Layer (TLS).
5. The method of claim 1 , wherein the first virtual cloud network site connects to the virtual private network using one or more of: a hosted connection, a direct port connection, a physical connection.
6. The method of claim 5 , wherein the physical connection is a physical cord connection from a hardware device of the first virtual cloud network site and the first node of the virtual private network.
7. The method of claim 1 , wherein the second virtual cloud network site connects to the virtual private network using one or more of: a hosted connection, a direct port connection, a physical connection.
8. The method of claim 1 , wherein the database items are received by a network load balancer in the second virtual cloud network site.
9. The method of claim 8 , wherein the second virtual cloud network site distributes, using the network load balancer, the database items to one or more servers of in the second virtual cloud network site.
10. The method of claim 1 , further comprising:
receiving, by the first virtual cloud network site, further database items from the second virtual cloud network site via the first node and the second node of the virtual private network.
11. A system comprising:
one or more processors of a machine; and
at least one memory storing instructions that, when executed by the one or more processors, cause the machine to perform operations comprising:
identifying, by a first virtual cloud network site, a virtual private network connected to the first virtual cloud network site and a second virtual cloud network site, the first virtual cloud network site being in a first geographic region and the second virtual cloud network site being in a second geographic region, the virtual private network comprising a first node in the first geographic region and a second node in the second geographic region;
generating, by the first virtual cloud network site, database items to be transmitted to the second virtual cloud network site;
determining that the database items are for transmission to the second virtual cloud network site through the virtual private network; and
in response to determining that the database items are for transmission to the second virtual cloud network site, exporting, by the first virtual cloud network site, the database items to the virtual private network for transmission to the second virtual cloud network site, the database items being transmitted to the second virtual cloud network site using the first node and the second node of the virtual private network.
12. The system of claim 11 , the operations further comprising:
generating additional database items by the first virtual cloud network site;
determining that the additional database items are for transmission to a third virtual cloud network site; and
in response to determining that the additional database items are for transmission to the third virtual cloud network site, transmitting the additional database items over the Internet.
13. The system of claim 12 , wherein the additional database items are transmitted over the Internet not using the virtual private network.
14. The system of claim 13 , wherein the additional database items are encrypted and transmitted over the Internet using Transport Security Layer (TLS).
15. The system of claim 11 , wherein the first virtual cloud network site connects to the virtual private network using one or more of: a hosted connection, a direct port connection, a physical connection.
16. The system of claim 15 , wherein the physical connection is a physical cord connection from a hardware device of the first virtual cloud network site and the first node of the virtual private network.
17. A non-transitory computer-storage medium embodying instructions that, when executed by a machine, cause the machine to perform operations comprising:
identifying, by a first virtual cloud network site, a virtual private network connected to the first virtual cloud network site and a second virtual cloud network site the first virtual cloud network site being in a first geographic region and the second virtual cloud network site being in a second geographic region, the virtual private network comprising a first node in the first geographic region and a second node in the second geographic region;
generating, by the first virtual cloud network site, database items to be transmitted to the second virtual cloud network site;
determining that the database items are for transmission to the second virtual cloud network site through the virtual private network; and
in response to determining that the database items are for transmission to the second virtual cloud network site, exporting, by the first virtual cloud network site, the database items to the virtual private network for transmission to the second virtual cloud network site, the database items being transmitted to the second virtual cloud network site using the first node and the second node of the virtual private network.
18. The non-transitory computer-storage medium of claim 17 , the operations further comprising:
generating additional database items by the first virtual cloud network site;
determining that the additional database items are for transmission to a third virtual cloud network site; and
in response to determining that the additional database items are for transmission to the third virtual cloud network site, transmitting the additional database items over the Internet.
19. The non-transitory computer-storage medium of claim 18 , wherein the additional database items are transmitted over the Internet not using the virtual private network.
20. The non-transitory computer-storage medium of claim 19 , wherein the additional database items are encrypted and transmitted over the Internet using Transport Security Layer (TLS).