Palo Alto Networks, Inc.

Uttam Ramesh

Jayant Jain

Brian Russell Kean

Mingfei Peng

Aditya Srinivasa Ivaturi

Srikanth Ramachandran

Srikanth Mulakaluri

Nidhi Shah

Jacob Rameen Chitsaz

Anycast addressing is utilized to support the connection of multiple application connectors fronting an application(s) to a network element and anycast routing of network traffic destined for the application(s). When an application is indicated for onboarding in a tenant's network fabric, a network controller allocates virtual and anycast addresses to the application. Allocation of anycast addresses is per domain name and port/protocol combination. Upon determining that the application is available, the application connector(s) advertises reachability of the application via the anycast address. The network controller orchestrates configuration of a domain name system entry that resolves the application name to its virtual Internet Protocol (IP) address and destination network address translation rules that translate the virtual IP address to the anycast address and the anycast address to the application's private IP address. Application network traffic can thus be forwarded to the application via any application connector that advertised the anycast address.

Configuring application availability using anycast addressing

A data packet is received. It is determined whether the data packet is encapsulated. One or more security policies are applied to the data packet based on whether the data packet is encapsulated.

Preserving security information over NAT enabled devices using encapsulation

Growing community of inventors

Sunnyvale, CA, United States of America

Uttam Ramesh