Colortokens, Inc.

Colotokens Inc.

Ravi Voleti

Ashish Trivedi

Deepak Kumar Mohanty

Anoop Singh Kapoor

Pankaj S Parekh

Harish Magganmane

Mritunjay Kumar

Charles Kuta

Satyam Tyagi

Vikas Kumar

Hari Hara Sudhan Rajalingam

Kantesh Sakri

Naveen Kulshreshtha

Suprio Pal

Ryan Farjadi

In a method of Local Peer to Peer Direct Connection in NAT and overlay network. A request is received from a first peer at a relay gateway to establish a direct connection with a second peer. The first peer and the second peer are located behind a NAT firewall. An authentication request is relayed from the first peer at the relay gateway. The authentication request is forwarded from the relay gateway to the second peer. Upon performing authentication at the second peer, an authentication response is received at the relay gateway. The authentication response is received from the relay gateway at the first peer. An internal route propagation is performed from the second peer to the first peer via the relay gateway. A Local Peer to Peer Direct Connection is established between the first peer and the second peer for packet flow through the direct connection.

Local peer to peer direct connection in network address translator (NAT) and overlay networks

A system and method for routing data packets between different overlay networks is disclosed. The method includes receiving a DNS lookup request for a resource from a first computing device coupled to a first overlay network. The first overlay network comprises a first edge application gateway. The method includes identifying a second computing device coupled to a second overlay network comprising the resource requested. The second overlay network comprises a second edge application gateway. The method further includes identifying a third overlay network. The data packets generated at, the first computing device is transferred to the first edge application gateway. The data packets are then transmitted from the first edge application gateway and the second edge application gateway over the third overlay network. Further, the data packets are transferred from the second edge application gateway to the second computing device thereby establishing communication between computing devices in different overlay network.

Establishing connection between different overlay networks using edge application gateway

Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a private domain name system (DNS) receives a DNS lookup request from a computing system of a plurality of computing systems associated with a private communication group, and forwards the DNS lookup request to a public DNS. The private DNS further receives a public address associated with the DNS lookup request from the public DNS, translates the public address to a private address, and transfers the private address to the requesting computing system.

Secure domain name system to support a private communication service

A centralized controller for probing and securing vulnerable network resources is disclosed. A list of services hosted by a resource is received at the controller. A request to probe the list of services hosted on the resource is received by the controller. A probe candidate is determined by the controller. The probing is triggered by the controller based on a user scheduled time. The probing includes sending a probe packet that contains a special marker. The controller sends the list of resources to be probed for a set of port and protocol, to the probe candidate. A probe result generated as a result of the probing is received at the controller. The probe result includes vulnerable service information. A policy is computed based on the probe result and is enforced on the probed resources.

Probe and secure the vulnerable network services using a centralized controller

A system and method for performing load balancing over an overlay network is disclosed. The load balancing is performed by a DNS load balancing module communicating to a plurality of computing devices communicatively coupled over the overlay network. The DNS load balancing module calculates and maintains a weighted value of each computing device among the plurality of computing device based on a plurality of parameters. The DNS load balancing module on receiving a DNS lookup request for a resource from a first computing device identifies a list of computing device among the plurality of computing device hosting the requested resource. The DNS load balancing module further performs load balancing by selecting a computing device among a list of computing devices for accessing the resource based on a weighted value calculated.

System and method of performing load balancing over an overlay network

A system and method for redirecting data packets communicated to a computing device over an overlay network is disclosed. The method includes monitoring resources installed on the computing device to identify the resources communicating over dedicated underlay IP address. The method further includes creating a rule based on the resources identified. The rule is transferred and stored on the computing device. On receiving a data packet, the rule is executed for redirecting the data packets from the overlay network to an underlay network and vice versa. The data packets are redirected by translating a destination IP address on a header of the data packet from an overlay IP address to an underlay IP address. The method thus redirects the data packets from the overlay network to the underlay network before reaching the resource, thereby preventing dropping of the data packet.

Redirecting data packets between overlay network and underlay network

Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request from an application on the computing system to transfer data to a second application on a second computing system. In response to the communication request, the communication service identifies a communication group of a plurality of communication groups associated with the application and the second application. Once the communication group is identified, the communication service identifies a communication quality of service based on the identified communication group, and transfers the data associated with the communication request to the second computing system in accordance with the communication quality of service.

Enhanced quality of service management for inter-computing system communication

The present disclosure envisages establishing a virtual overlay network between the source computer and the destination computer (in addition to a typical, unsecured, public computer network already connecting the source computer and the destination computer), and designating the source computer and destination computer to be identified on the virtual overlay network only by the corresponding source private IP address and destination private IP address. The present disclosure envisages an intermediary server for creating and subsequently managing the virtual overlay network. The intermediary server renders the virtual overlay network accessible only to the source computer and the destination computer to communicate with one another and to exchange data packets using the source private IP address and destination private address and the corresponding private ports, while ensuring that the virtual overlay network remains inaccessible to any other computer on the underlying public computer network.

System and method for enhancing the security of data packets exchanged across a computer network

Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request for a first application on a first computing system to transfer data to a second application on a second computing system. In response to the request, the communication service generates a packet, wherein the packet includes an encrypted portion for the data and private addressing associated with the first and second applications, and an unencrypted portion for group identifier information and public addressing information. Once the packet is generated, the packet is transferred to the second computing system.

Enhanced packet formating for security inter-computing system communication

Described herein are systems, methods, and software to enhance gateway security for multiple communication groups. In one implementation, a method of operating a gateway service includes identifying a data packet received from a first computing system, wherein the data packet comprises a first destination port value. The method further includes, identifying a group identifier within the data packet, wherein the group identifier associated with a communication group of the plurality of communication groups, translating the first destination port value to a second destination port value based on the group identifier, and forwarding the data packet with the translated second destination port value.

Growing community of inventors

Fremont, CA, United States of America

Ravi Voleti