Vmware, Inc.

Nicira, Inc.

Telefonaktiebolaget Lm Ericsson (publ)

Cisco Technology, Inc.

Prashanth Venugopal

Israel Cidon

Chen Dar

Eyal Zohar

Aran Bergman

Alex Markuze

Sami Boutros

Ankur Dubey

Mike Parsa

Sarat Kamisetty

Brian Russell Kean

Siva Gaggara

Nikhil Gopinath Shetty

Some embodiments provide a novel method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

Providing recommendations for implementing virtual networks

Some embodiments establish for an entity a virtual network over several public clouds of several public cloud providers and/or in several regions. In some embodiments, the virtual network is an overlay network that spans across several public clouds to interconnect one or more private networks (e.g., networks within branches, divisions, departments of the entity or their associated datacenters), mobile users, and SaaS (Software as a Service) provider machines, and other web applications of the entity. The virtual network in some embodiments can be configured to optimize the routing of the entity's data messages to their destinations for best end-to-end performance, reliability and security, while trying to minimize the routing of this traffic through the Internet. Also, the virtual network in some embodiments can be configured to optimize the layer 4 processing of the data message flows passing through the network.

Identifying multiple nodes in a virtual network defined over a set of public clouds to connect to an external SaaS provider

Layer four optimization for a virtual network defined over public cloud

Deploying firewall for virtual network defined over public cloud infrastructure

Identifying multiple nodes in a virtual network defined over a set of public clouds to connect to an external SAAS provider

Overlay network encapsulation to forward data message flows through multiple public cloud datacenters

Configuring edge nodes outside of public clouds to use routes defined through the public clouds

For a multi-tenant environment, some embodiments of the invention provide a novel method for (1) embedding a specific path for a tenant's data message flow through a network in tunnel headers encapsulating the data message flow, and then (2) using the embedded path information to direct the data message flow through the network. In some embodiments, the method selects the specific path from two or more viable such paths through the network for the data message flow.

Specifying and utilizing paths through a network

Providing measurements of public cloud connections

A method for deploying different virtual networks over several public cloud datacenters for different entities. For each entity, the method (1) identifies a set of public cloud datacenters of one or more public cloud providers to connect a set of machines of the entity, (2) deploys managed forwarding nodes (MFNs) for the entity in the identified set of public cloud datacenters, and then (3) configures the MFNs to implement a virtual network that connects the entity's set of machines across its identified set of public cloud datacenters. In some embodiments, the method identifies the set of public cloud datacenters for an entity by receiving input from the entity's network administrator. In some embodiments, this input specifies the public cloud providers to use and/or the public cloud regions in which the virtual network should be defined. Conjunctively, or alternatively, this input in some embodiments specifies actual public cloud datacenters to use.

Alleviating congestion in a virtual network deployed over public clouds for an entity

Identifying different SaaS optimal egress nodes for virtual networks of different entities

Growing community of inventors

San Francisco, CA, United States of America

Prashanth Venugopal