Versa Networks, Inc.

Manjunath Prabhu

Apurva Mehta

Kumar B Mehta

Srinivasa Chaganti

Shivaprakash Shenoy

Randhir Bhattacharya

Ramasamy Ramanathan

Shiva Shenoy

Jayakrishnan V Iyer

Prasanna Siddalingaiah

A method for protecting data flows between pairs of branch nodes in a software-defined wide-area network (SD-WAN) is disclosed. In an embodiment, the method involves establishing secure connections between a SD-WAN controller and branch nodes in a plurality of branch nodes, wherein each branch node advertises a half-key to the SD-WAN controller via its secure connection, distributing advertised half-keys to branch nodes in the plurality of branch nodes via the established secure connections, wherein the advertised half-keys distributed to each branch node are the half-keys advertised by peer branch nodes of the branch node, and encrypting payloads for transmission from a first branch node in the plurality of branch nodes to a peer branch node in the plurality of branch nodes using a shared secret key, the shared secret key generated using the half-key of the first branch node and the distributed half-key of the peer branch node.

Method and system for protecting data flow between pairs of branch nodes in a software-defined wide-area network

In general, techniques for implementing a flow distribution service using a plurality of traffic nodes that may operate as processing nodes of a distributed computing system are described. In some examples, the traffic nodes in the aggregate form a virtual appliance configured to apply a network service to packet flows.

Flow distribution table for packet flow load balancing

Growing community of inventors

Santa Clara, CA, United States of America

Manjunath Prabhu