Hewlett Packard Enterprise Development LP

Silver Peak Systems, Inc.

Manoj Gopal Kulkarni

Damon John Ennis

Pawan Kumar Singh

Theodore Ernest Tedijanto

Manoj Kumar Dutta

David Anthony Hughes

Patrick Lee Mahan

Zhigang Yin

Srivathsa Sarangapani

Rolf Muralt

Edward Paul Travalia

Ravikumar Govindarao

Gopinath Sikha

Timothy Robert Hefel

Bowen Yan

Kennedy Tjong Ki Ngo

Jigar Chheda

Ganesh Lakshmanan

Disclosed herein are systems and methods for the creation, management, and utilization of a multi-region virtual overlay wide area network from a plurality of special purpose network appliances. In exemplary embodiments, multiple regions are created for the virtual overlay wide area network, each region having its own network topology. At least one network appliance from each region is in communication with at least one network appliance from each other region, for inter-region connectivity within the virtual overlay wide area network. A subnet sharing protocol can be utilized to exchange routing information among each network appliance within each region, and between each region.

Multi-region virtual overlay wide area network

Disclosed herein are systems and methods for scalable and secure transmission of multicast data over a public communication network. In exemplary embodiments of the present disclosure, a virtual overlay network can be presented as a single virtual interface to a computing device, for the receipt and transfer of multicast data in a secure and scalable manner across a public insecure communication network.

Transfer of secure multicast data traffic over a computing network

Systems and methods for selectively transmitting routing information between separated local area network (LAN) interfaces are disclosed. In exemplary embodiments, a network appliance to update a local routing table with IP subnet, neighbor type, source type, and community identifier of a second network appliance; based at least on the local routing table, receive a customized routing policy and subnet exporting policy that permits the network appliance to export a subset of IP addresses from the local routing table to a permitted community of network appliances, wherein the customized routing policy and subnet exporting policy are configured by a network administrator of the network appliance; match the permitted community of network appliances to a new community identifier of a third network appliance; and export the subset of IP addresses of the local routing table to the third network appliance based on the customized routing policy and subnet exporting policy.

Selective routing

Provided are methods, apparatus, and system for policy based wide area network. A network of network appliances is configured with a policy configuration. Each network appliance is configured to validate each wide area network packet against the policy configuration. The validation can include verifying that the packets meet the SD-WAN network segment requirements and security rules including verifying that the source and destination address of the packet meet the firewall zone requirements. Each wide area network packet contains a policy header that is checked by the sending and receiving network appliance against the policy configuration.

Method device and system for policy based packet processing

Systems and methods for selectively advertising routing information by a network appliance to a neighboring computing device are disclosed. In exemplary embodiments, customized export policies are created based on source type for each neighboring computing device to a network appliance. A source type for routing information is determined by the network appliance. The routing information is exported by the appliance to the neighboring computing device, such as a BGP router, based on the customized export policy associated with the source type.

Selective route exporting using source type

Growing community of inventors

Fremont, CA, United States of America

Manoj Gopal Kulkarni