CA2474658A1 - Policy based routing system and method for caching and vpn tunneling - Google Patents

Policy based routing system and method for caching and vpn tunneling Download PDF

Info

Publication number
CA2474658A1
CA2474658A1 CA002474658A CA2474658A CA2474658A1 CA 2474658 A1 CA2474658 A1 CA 2474658A1 CA 002474658 A CA002474658 A CA 002474658A CA 2474658 A CA2474658 A CA 2474658A CA 2474658 A1 CA2474658 A1 CA 2474658A1
Authority
CA
Canada
Prior art keywords
data packet
enterprise network
router
routing
special purpose
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CA002474658A
Other languages
French (fr)
Other versions
CA2474658C (en
Inventor
John F. Mangan
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Spectrum Management Holding Co LLC
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Publication of CA2474658A1 publication Critical patent/CA2474658A1/en
Application granted granted Critical
Publication of CA2474658C publication Critical patent/CA2474658C/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/302Route determination based on requested QoS
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0227Filtering policies
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0272Virtual private networks

Abstract

An enterprise network interface communicates with a public regional Autonomous System Border Router (ASBR) (20, 30). The ASBR only forwards the enterprise network traffic to the router interface. The router interface redirects data packets to data highly specialized packet processing appliances for parallel processing VPN (24) and cache application (26) traffic. Policy based routing instructions are imposed on the ASBR for subsequent secure, tunneled transmission. This enterprise routing system and method used within an enterprise imposes routing instructions superseding gateway protocol routing thus allowing VPN and content caching applications to run efficiently and securely without resort to an enterprise dedicated backbone.

Claims

I CLAIM:

[c1] An enterprise network routing system comprising:
a public network regional router for routing data packets according to a gateway routing protocol;
a router interface device dedicated to an enterprise, the router interface device comprising:
an interface for sending and receiving a data packet to and from the public network regional router wherein the public network regional router routes data packets destined for the enterprise network to the router interface device; and logic for redirecting a data packet to a special purpose data packet device.
[c2] The enterprise network routing system of claim [c1] wherein the special purpose data packet device comprises:
communication logic for sending and receiving a data packet to and from the router interface device;
logic for analyzing and modifying the data packet; and logic for inserting policy based management instruction within the public network regional router; and logic for processing the data packet for one hop delivery wherein the policy based management instruction supercedes the gateway routing protocol.
[c3] The enterprise network routing system of claim [c2] wherein the special purpose data packet device is a cache appliance wherein the cache appliance comprises logic for storing a location of active cache data for the enterprise network allowing accelerated cache retrieval for enterprise network users.
[c4] The enterprise network routing system of claim [c2] wherein the special purpose data packet device is a VPN device comprising logic for identifying a target enterprise network destination address for the data packet.
[c5] The enterprise network routing system of claim [c2] further comprising a second special purpose data packet device wherein the second special purpose data packet device is a VPN device.
[c6] The enterprise network routing system of claim [c2] wherein the router interface device is a Layer 4 switch.
[c7] The enterprise network routing system of claim [c2] wherein the router interface device further comprises logic for encapsulating the data packet for secure tunneling transmission across the public network.
[c8] The enterprise network routing system of claim [c2] wherein the special purpose data packet device further comprises logic for encapsulating the data packet for secure tunneling transmission across the public network.
[c9] The enterprise network routing system of claim [c2] wherein the system is redundant so as to further comprise at least one duplicate public network regional router, at least one duplicate router interface device, and at least one duplicate special purpose data packet device.
[c10] The enterprise network routing system of claim [c2] wherein the data packet uses a CIDR IP addressing.
[c11] An enterprise network routing method comprising:
routing data packets according to a gateway routing protocol across a public network;
forwarding a specific data packet at a router interface device dedicated to an enterprise, the forwarding comprising:
sending and receiving a data packet to and from the public network via a public network regional router wherein the public network regional router routes data packets destined for the enterprise network to the router interface device;

redirecting a data packet to a special purpose data packet device wherein the special purpose data packet device comprises:
sending and receiving a data packet to and from the router interface device;
analyzing and modifying the data packet; and inserting policy based management instruction within the public network regional router; and processing the data packet for one hop delivery wherein the policy based management instruction supercedes the gateway routing protocol.
[c12] The enterprise network routing method of claim [c10] wherein the special purpose data packet device operates as a cache appliance, wherein the cache appliance stores a location for active cache data for the enterprise network thereby allowing accelerated cache retrieval for enterprise network users.
[c13] The enterprise network routing method of claim [c10] wherein the special purpose data packet device operates as a VPN device and identifies a target enterprise network destination address for the data packet.
[c14] The enterprise network routing method of claim [c10] wherein the redirecting a data packet to a special purpose device further comprises redirecting a data packet to a cache appliance or a VPN device.
[c15] The enterprise network routing method of claim [c10] wherein the router interface device, at which the forwarding a specific data packet occurs, is a Layer 4 switch.
[c16] The enterprise network routing method of claim [c10] wherein the router interface device encapsulates the data packet for secure tunneling transmission across the public network.
[c17] The enterprise network routing method of claim [c10] wherein the special purpose data packet device encapsulates the data packet for secure tunneling transmission across the public network.
[c18] The enterprise network routing method of claim [c10] wherein the method is practiced via an enterprise network having redundancy provided by a duplicate public network regional router, a duplicate router interface device, and a duplicate special purpose data packet device.
[c19] The enterprise network routing method of claim [c10] further comprising identifying specific data packets using a CIDR IP notation.
[c20] An enterprise network routing system comprising:
a public network regional router for routing data packets according to a gateway routing protocol;
a router interface device dedicated to an enterprise, the router interface device comprising:
an interface for sending and receiving a data packet to and from the public network regional router wherein the public network regional router routes data packets destined for the enterprise network to the router interface device;
logic for redirecting a data packet to a special purpose data packet device, wherein the special purpose data packet device comprises:
communication logic for sending and receiving a data packet to and from the router interface device;
logic for analyzing and modifying the data packet; and logic for inserting policy based management instruction within the public network regional router; and logic for processing the data packet for one hop delivery wherein the policy based management instruction supercedes the gateway routing protocol.
[c21] An enterprise network routing system comprising:
means for routing data packets in a region of a public network according to a gateway routing protocol;
means for interfacing the means for routing, the means for interfacing being dedicated to an enterprise network, the means for interfacing comprising:
means for sending and receiving a data packet to and from the means for routing, wherein the means for routing routes data packets destined for the enterprise network to the means for interfacing;
means for redirecting a data packet to a special purpose data packet device according to logic, wherein the special purpose data packet device comprises:
means for sending and receiving a data packet to and from the router interface device;
means for analyzing and modifying the data packet;
means for inserting policy based management instruction within the means for routing; and means for processing the data packet for one hop delivery wherein the policy based management instruction supercedes the gateway routing protocol.
CA2474658A 2002-02-01 2003-02-03 Policy based routing system and method for caching and vpn tunneling Expired - Lifetime CA2474658C (en)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US10/061,696 2002-02-01
US10/061,696 US7069336B2 (en) 2002-02-01 2002-02-01 Policy based routing system and method for caching and VPN tunneling
PCT/US2003/003319 WO2003065241A1 (en) 2002-02-01 2003-02-03 Policy based routing system and method for caching and vpn tunneling

Publications (2)

Publication Number Publication Date
CA2474658A1 true CA2474658A1 (en) 2003-08-07
CA2474658C CA2474658C (en) 2010-12-07

Family

ID=27658477

Family Applications (1)

Application Number Title Priority Date Filing Date
CA2474658A Expired - Lifetime CA2474658C (en) 2002-02-01 2003-02-03 Policy based routing system and method for caching and vpn tunneling

Country Status (3)

Country Link
US (1) US7069336B2 (en)
CA (1) CA2474658C (en)
WO (1) WO2003065241A1 (en)

Families Citing this family (51)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
TWI223942B (en) * 2001-02-20 2004-11-11 Li Jian Min Contents transmission network system and creating method thereof
US7233593B2 (en) * 2002-03-05 2007-06-19 Nortel Networks Limited System, device, and method for routing information in a communication network using policy extrapolation
US7016883B2 (en) * 2002-04-23 2006-03-21 Sprint Communications Company L.P. Reverse caching for residential end-users to reduce usage of access links to a core communication network
US20050027882A1 (en) * 2003-05-05 2005-02-03 Sullivan Alan T. Systems and methods for direction of communication traffic
US20050105513A1 (en) * 2002-10-27 2005-05-19 Alan Sullivan Systems and methods for direction of communication traffic
US7603481B2 (en) * 2002-10-31 2009-10-13 Novell, Inc. Dynamic routing through a content distribution network
US20050188108A1 (en) * 2002-10-31 2005-08-25 Volera, Inc. Enriched tree for a content distribution network
US7313605B2 (en) 2003-07-03 2007-12-25 At&T Corp. Externally controlled reachability in virtual private networks
US20050010761A1 (en) * 2003-07-11 2005-01-13 Alwyn Dos Remedios High performance security policy database cache for network processing
US20050071494A1 (en) * 2003-09-30 2005-03-31 Rundquist William A. Method and apparatus for providing fixed bandwidth communications over a local area network
US20050188211A1 (en) * 2004-02-19 2005-08-25 Scott Steven J. IP for switch based ACL's
GB0406860D0 (en) * 2004-03-26 2004-04-28 British Telecomm Computer apparatus
US7353537B2 (en) * 2004-03-31 2008-04-01 Novell, Inc. Secure transparent virtual private networks
US7697438B2 (en) * 2004-05-12 2010-04-13 Hewlett-Packard Development Company, L.P. Method of routing packet
US7512675B2 (en) * 2004-05-28 2009-03-31 Alcatel-Lucent Usa Inc. Cleaning and removing duplicated unique identifiers from remote network nodes
US20060140182A1 (en) * 2004-12-23 2006-06-29 Michael Sullivan Systems and methods for monitoring and controlling communication traffic
US7551615B2 (en) * 2004-12-29 2009-06-23 Intel Corporation Method for packet encapsulation and redirection of data packets
WO2006072949A1 (en) * 2005-01-05 2006-07-13 Yissum Research Development Company Of The Hebrew University Of Jerusalem A method and apparatus for managing communications
US20060174035A1 (en) * 2005-01-28 2006-08-03 At&T Corp. System, device, & method for applying COS policies
US7779449B2 (en) * 2005-04-13 2010-08-17 The Boeing Company Secured network processor
US9225584B1 (en) * 2005-07-28 2015-12-29 Marvell International Ltd. Alternative network address port translation
US20070162331A1 (en) * 2006-01-10 2007-07-12 Michael Sullivan Systems and methods for providing information and conducting business using the internet
DE112006003638T5 (en) * 2006-01-17 2008-11-27 Intel Corporation, Santa Clara Method for packet encapsulation and routing of data packets
US7933951B2 (en) * 2006-01-20 2011-04-26 Paxfire, Inc. Systems and methods for discerning and controlling communication traffic
US8130638B2 (en) * 2006-01-24 2012-03-06 Cisco Technology, Inc. Method and apparatus to elect ABRs dynamically and intelligently
US7693059B2 (en) * 2006-01-30 2010-04-06 International Business Machines Corporation Advanced VPN routing
US8818322B2 (en) * 2006-06-09 2014-08-26 Trapeze Networks, Inc. Untethered access point mesh system and method
US20080019382A1 (en) * 2006-07-20 2008-01-24 British Telecommunications Public Limited Company Telecommunications switching
US20080019362A1 (en) * 2006-07-20 2008-01-24 British Telecommunications Public Limited Company Telecommunication multicast system
US20080019383A1 (en) * 2006-07-20 2008-01-24 British Telecommunications Public Limited Company Telecommunications switching
US20080019384A1 (en) * 2006-07-20 2008-01-24 British Telecommunications Public Limited Company Telecommunication multicast system
US20080101367A1 (en) * 2006-10-31 2008-05-01 Weinman Joseph B Method and apparatus for providing security policy based route selection
US20080112399A1 (en) * 2006-11-13 2008-05-15 British Telecommunications Public Limited Company Telecommunications system
US20080186854A1 (en) * 2007-02-06 2008-08-07 British Telecommunications Public Limited Company Network monitoring system
US20080188191A1 (en) * 2007-02-06 2008-08-07 British Telecommunications Public Limited Company Network monitoring system
US20080301801A1 (en) * 2007-05-31 2008-12-04 Premkumar Jothimani Policy based virtual private network (VPN) communications
US20110071997A1 (en) * 2007-07-30 2011-03-24 Sullivan Alan T Systems and methods for direction of communication traffic
US9130968B2 (en) * 2008-01-16 2015-09-08 Netapp, Inc. Clustered cache appliance system and methodology
US8751663B2 (en) * 2008-02-08 2014-06-10 Front Porch, Inc. Method and apparatus for modifying HTTP at a remote data center via tunneling
US8743740B2 (en) * 2008-04-08 2014-06-03 At&T Intellectual Property I, L.P. Methods and apparatus to implement a partial mesh virtual private local area network service
US7970931B2 (en) * 2008-06-26 2011-06-28 Microsoft Corporation Policy-based routing in a multi-homed computer
TW201018140A (en) * 2008-10-16 2010-05-01 Chunghwa Telecom Co Ltd System and method for protecting data of network user
US8266088B2 (en) * 2009-06-09 2012-09-11 Cisco Technology, Inc. Tracking policy decisions in a network
US8886708B2 (en) * 2009-12-02 2014-11-11 Vmware, Inc. Centralized computer network virtualization environment
US9936037B2 (en) * 2011-08-17 2018-04-03 Perftech, Inc. System and method for providing redirections
US9596271B2 (en) 2012-10-10 2017-03-14 International Business Machines Corporation Dynamic virtual private network
US9548963B2 (en) * 2014-04-01 2017-01-17 At&T Intellectual Property I, L.P. Method and system to enable a virtual private network client
WO2016172252A1 (en) * 2015-04-20 2016-10-27 Shoelace Wireless, Inc. Systems for improved mobile internet speed and security
US11290425B2 (en) * 2016-02-01 2022-03-29 Airwatch Llc Configuring network security based on device management characteristics
US10601777B2 (en) * 2017-02-17 2020-03-24 Corrata Limited Data inspection system and method
US10931640B2 (en) * 2018-06-22 2021-02-23 International Business Machines Corporation Tunneling network traffic using object storage

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6130092A (en) * 1994-07-04 2000-10-10 Max-Planck Gesellschaft Zur Forderung Der Wissenschaften E.V. Ribozyme gene library and method for making
US6105027A (en) 1997-03-10 2000-08-15 Internet Dynamics, Inc. Techniques for eliminating redundant access checking by access filters
US6178505B1 (en) 1997-03-10 2001-01-23 Internet Dynamics, Inc. Secure delivery of information in a network
US6130892A (en) 1997-03-12 2000-10-10 Nomadix, Inc. Nomadic translator or router
US6167438A (en) 1997-05-22 2000-12-26 Trustees Of Boston University Method and system for distributed caching, prefetching and replication
US6078590A (en) 1997-07-14 2000-06-20 Cisco Technology, Inc. Hierarchical routing knowledge for multicast packet routing
US6182226B1 (en) 1998-03-18 2001-01-30 Secure Computing Corporation System and method for controlling interactions between networks
US6260070B1 (en) 1998-06-30 2001-07-10 Dhaval N. Shah System and method for determining a preferred mirrored service in a network by evaluating a border gateway protocol
US6081900A (en) 1999-03-16 2000-06-27 Novell, Inc. Secure intranet access
US6609148B1 (en) * 1999-11-10 2003-08-19 Randy Salo Clients remote access to enterprise networks employing enterprise gateway servers in a centralized data center converting plurality of data requests for messaging and collaboration into a single request
US7149222B2 (en) * 1999-12-21 2006-12-12 Converged Access, Inc. Integrated access point network device
DE60130844T2 (en) 2000-08-29 2008-07-17 International Business Machines Corp. Autonomous OSPF system with a main network separated into two sections
US7124189B2 (en) * 2000-12-20 2006-10-17 Intellisync Corporation Spontaneous virtual private network between portable device and enterprise network
AU2002345633A1 (en) * 2001-06-08 2002-12-23 4Th Pass Inc. Method and system for two-way initiated data communication with wireless devices
US7013342B2 (en) * 2001-12-10 2006-03-14 Packeteer, Inc. Dynamic tunnel probing in a communications network

Also Published As

Publication number Publication date
US20030149787A1 (en) 2003-08-07
CA2474658C (en) 2010-12-07
US7069336B2 (en) 2006-06-27
WO2003065241A1 (en) 2003-08-07

Similar Documents

Publication Publication Date Title
CA2474658A1 (en) Policy based routing system and method for caching and vpn tunneling
US6747979B1 (en) Method and apparatus for bridging between networks
US6982978B1 (en) Per user and network routing tables
CN102170386B (en) The implementation method that identify label is separated with position, system and data encapsulation method
US8065434B2 (en) Method and device for maintaining routes
US8787218B2 (en) Dynamic establishment of virtual circuits multisegment pseudowires
EP1942617B1 (en) Method, device and system for Ethernet-supported Source Specific Multicast forwarding
KR100930269B1 (en) Method and apparatus for supporting WEB in mobility management
EP3697033B1 (en) Method and device for forwarding information
CN100534218C (en) A method for realizing the communication between the mobile IPv4 node and IPv6 communication node
CA2534104A1 (en) Dynamic and traffic-driven optimization of message routing to geographical addresses
JP5199331B2 (en) Device and method for routing data units in a network
CN112887188B (en) Message forwarding method and device
CN108632145A (en) A kind of message forwarding method and leaf node device
CN1870588A (en) Implementing method and system for support VPLS service on IP skeletal network
EP1063820A1 (en) Internet forwarding method, related system and related devices
WO2003069443A3 (en) Method and system for forwarding smtp traffic
KR100431207B1 (en) Exteranet ip-vpn service provinding methode in mpls based network
EP0998081A1 (en) Method and apparatus for bridging between networks
FI20002491A (en) A method for transferring packets over a circuit switched network
CN101540729A (en) Data transmission method and device
Zhou et al. Reverse routing: An alternative to mip and romip protocols
JP3825438B2 (en) Label switching network and label edge router
CN100407683C (en) Method for realizing IPv6 network intercommunication based on heteromedium
CN105323084B (en) Method, device and system for managing TRILL network by three layers of network management

Legal Events

Date Code Title Description
EEER Examination request
MKEX Expiry

Effective date: 20230203