Hewlett Packard Enterprise Development LP

Patrick Lee Mahan

Damon John Ennis

Theodore Ernest Tedijanto

Pawan Kumar Singh

Manoj Gopal Kulkarni

Manoj Kumar Dutta

David Anthony Hughes

Zhigang Yin

Srivathsa Sarangapani

Bowen Yan

Kennedy Tjong Ki Ngo

Ganesh Lakshmanan

Ravikumar Govindarao

Disclosed herein are systems and methods for the creation, management, and utilization of a multi-region virtual overlay wide area network from a plurality of special purpose network appliances. In exemplary embodiments, multiple regions are created for the virtual overlay wide area network, each region having its own network topology. At least one network appliance from each region is in communication with at least one network appliance from each other region, for inter-region connectivity within the virtual overlay wide area network. A subnet sharing protocol can be utilized to exchange routing information among each network appliance within each region, and between each region.

Multi-region virtual overlay wide area network

Provided are methods, apparatus, and system for policy based wide area network. A network of network appliances is configured with a policy configuration. Each network appliance is configured to validate each wide area network packet against the policy configuration. The validation can include verifying that the packets meet the SD-WAN network segment requirements and security rules including verifying that the source and destination address of the packet meet the firewall zone requirements. Each wide area network packet contains a policy header that is checked by the sending and receiving network appliance against the policy configuration.

Method device and system for policy based packet processing

Growing community of inventors

Soquel, CA, United States of America

Patrick Lee Mahan