Client Agent Routing VPN Traffic Around Network Disruption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Enterprises face challenges in efficiently routing client traffic across multiple tunnels in a network environment, particularly in achieving load balancing, reduced latency, and seamless failover, as existing solutions lack effective mechanisms for dynamic connection management and appliance selection.

Innovation Solution

A client agent establishes multiple connections with network appliances, intercepts packets, and selectively routes them based on characteristics such as connection usability, load, and performance, allowing for intelligent load balancing and failover strategies.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a client establishes multiple connections to network appliances for load balancing and failover, then reliability and performance are improved, but device complexity and connection management overhead increase

Engineering Contradiction:
Improveconnection reliabilityVSAvoidconnection management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The client agent autonomously manages multiple connections to network appliances, automatically detecting connection status, selecting appropriate appliances, and routing traffic without requiring external intervention or complex centralized management systems

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system dynamically adjusts connection routing based on real-time connection status, load conditions, and performance metrics, allowing the client to adaptively switch between appliances rather than using static routing configurations

Inventive Principle:
Principle #15Dynamics

2Reliability

If traffic is routed through intermediary appliances for security and management, then network security is improved, but latency increases

Engineering Contradiction:
Improvenetwork securityVSAvoidnetwork latency
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system segments traffic routing decisions by appliance type and connection status, routing traffic through intermediary appliances only when necessary for security or management purposes, while allowing direct connections when possible to minimize latency

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The client agent pre-establishes multiple connections to different appliances and monitors their status in advance, so that when traffic needs to be routed, the appropriate connection is already available and optimized, reducing the time penalty of intermediary routing

Inventive Principle:
Principle #10Preliminary action

3Productivity

If multiple appliances are used to provide access to servers, then load balancing and performance are improved, but the difficulty of detecting and measuring connection status increases

Engineering Contradiction:
Improveload balancing efficiencyVSAvoidconnection status detection
Core Design Contradiction:
ProductivityVSDifficulty of detecting and measuring

Solution Approach 1:

The client agent continuously monitors connection status, performance metrics, and appliance health through feedback mechanisms, using this information to dynamically adjust traffic routing and maintain optimal load balancing across multiple appliances

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The client agent implements a universal connection management mechanism that can detect and measure various types of connection status (availability, load, performance, health) across different appliance types through a unified interface, simplifying the complexity of monitoring multiple appliances

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS7953889B2Systems and methods for routing VPN traffic around network disruption
Publication Date: 2011.05.31 CITRIX SYSTEMS INC
  • US7953889B2 patent drawing
  • US7953889B2 patent drawing
  • US7953889B2 patent drawing

AI summary

Methods for using a client agent to route client requests among a plurality of appliances using transport layer information include the steps of: establishing, by a client agent executing on a client, a first transport layer connection with a first appliance of a plurality of appliances, the first appliance providing access to one or more servers; establishing, by a client agent executing on the client, a second transport layer connection with a second appliance of a plurality of appliances, the second appliance providing access to one or more servers; intercepting, by the client agent, a packet transmitted by the client; selecting, by the client agent, one of the connections to transmit the intercepted packet based on a characteristic of at least one of: the transport layer connections, the plurality of appliances, or the servers; and transmitting the intercepted packet via the selected connection.