Granted Patent B1

US 12,206,728 · App. 17/332,994 · Granted Jan 21, 2025

Inventors: Yixin Sun (San Ramon, CA); Shanshan Xu (Fremont, CA); Colby Wen (Pleasanton, CA); Xiaobo Sherry Wei (Palo Alto, CA)

Assignee: Aviatrix Systems, Inc.

H04L67/10H04L45/123H04L45/22

Abstract

Claims (30)

1. A non-transitory storage medium comprising a controller deployed as a software component maintained within a non-transitory storage medium, the controller comprising:

a first data store configured to store current routing information from a source transit gateway within at least a first transit cloud network of a cloud network to a destination transit gateway of the plurality of transit gateways within at least a second transit cloud network of the cloud network, each of the source transit gateway and the destination transit gateway being one of a plurality of transit gateways associated with the cloud network;

a second data store configured to store alternative routing information between the source transit gateway to the destination transit gateway; and

route determination logic configured to (i) periodically conduct analytics on all available route paths for a message intended to be sent from the source transit gateway to the destination transit gateway, (ii) select a best route path for the message based upon the analytics, (iii) create, for the selected best route path for the message, a series of pointers that represent intermediary transit gateways of the plurality of transit gateways and their routing order, (iv) determine, via the periodically conducted analytics, if an IPSec tunnel has failed; (v) disable a virtual tunnel interface associated with the failed IPSec tunnel, (v) determine, via the periodically conducted analytics, if the failed IPSec tunnel becomes operational again; and (vi) reactivate the virtual tunnel interface when the failed IPSec tunnel becomes operational again.

2. The controller of claim 1 , wherein the best route path constitutes an optimal sequence of transit gateways of the plurality of transit gateways that support a transmission of data traffic between a source cloud instance communicatively coupled to the source transit gateway to a destination cloud instance communicatively coupled to the destination transit gateway.

3. The controller of claim 2 , wherein the cloud network corresponds to a multi-cloud network comprises one or more virtual private cloud networks associated with a first public cloud network and one or more virtual private cloud networks associated with a second public cloud network.

4. The controller of claim 1 , wherein each of the available route paths includes a series of pointers that represent each of the transit gateways for routing the message from the source transit gateway to the destination transit gateway.

5. The controller of claim 4 , wherein each of the series of pointers correspond to an autonomous system (AS) value.

6. The controller of claim 1 , wherein the alternative routing information comprises one or more route paths including a series of autonomous system (AS) values.

7. The controller of claim 6 , wherein the alternative routing information further comprises information metrics associated with each of the one or more route paths, the information metrics include (a) metrics directed to link parameters, (b) metrics directed to security, and (c) metrics directed to a work load supported by an alternate route path of the one or more route path, and the information metrics being used to determine an alternative route path as the best route path in response to a failure of communication links between the first transit cloud network and the second transit cloud network.

8. The controller of claim 7 , wherein the information metric further comprises an Internet Protocol (IP) address for a neighboring transit gateway of the source transit gateway.

9. The controller of claim 1 , wherein the route determination logic is further configured to enable the tunnel interface corresponding to the failure of communication links upon a determination that the failure of communication links becomes operational.

10. The method of claim 1 , further comprising enabling the tunnel interface corresponding to the unavailable best route path upon a determination that the unavailable best route path becomes operational.

11. A method, comprising:

determining whether a best route path between a source transit gateway of a first transit cloud network and a destination transit gateway of a second transit cloud network is unavailable;

responsive to determining that the best route path is unavailable, conducting analytics of a first metrics for each alternative route path of a plurality of alternative route paths;

responsive to two or more alternative route paths of the plurality of alternative route paths including equivalent metrics, periodically conducting analytics of secondary metrics for each alternative route path of the plurality of alternative route paths to determine a selected alternative route path of the plurality of alternative route paths as the best route path;

creating, for the selected alternative route path, a series of pointers that represent intermediary transit gateways of the plurality of transit gateways and their routing order;

determining, via the periodically conducted analytics, if a virtual tunnel interface has failed;

responsive to a determination that the virtual tunnel interface has failed, disabling the virtual tunnel interface to mitigate data transmission loss;

determining, via the periodically conducted analytics, if the failed virtual tunnel interface becomes operational again; and

and reactivating the failed virtual tunnel interface when the failed virtual tunnel interface becomes operational again.

12. The method of claim 11 , wherein the first metrics include a determination of a number of hops for each alternative route path of the plurality of alternative route paths.

13. The method of claim 12 , wherein the best route path is unavailable based on a failure of all communication links between the first transit cloud network and the second transit cloud network.

14. The method of claim 13 , wherein the analytics of the secondary metrics is conducted in response to two or more alternative route paths of the plurality of alternative route paths having the same number of hops.

15. The method of claim 14 , wherein the conducting of the analytics of the secondary metrics comprises analytics of link parameter metrics being metrics identifying preferences between communication links from the source transit gateway to a neighboring transit gateway associated with each of the two or more alternate route paths.

16. The method of claim 14 , wherein the conducting of the analytics of the secondary metrics comprises analytics of security metrics where a preferred value is assigned to an encrypted communication link of the communication links or a preferred value is assigned to a communication link of the communication links operating in accordance with a certain security protocol.

17. The method of claim 14 , wherein the conducting of the analytics of the secondary metrics comprises analytics of workload associated with a neighboring transit gateway for each of the two or more alternative route paths.

18. The method of claim 14 , wherein the secondary metrics further includes selection of a neighboring transit gateway of the two or more alternative route paths with a lowest Internet Protocol (IP) address.

19. The method of claim 14 , wherein the secondary metrics further includes selection of a neighboring transit gateway of the two or more alternative route paths with a highest Internet Protocol (IP) address.

Assignments (1)

References Cited (39)