Hub and Spoke Virtual Network Topology for Cloud Peering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtualization technologies face limitations in scaling networks for enterprises with multiple lines of business (LOBs) due to constraints on the number of peering links, making it difficult to migrate traditional systems to virtualized environments without significant rearchitecting and increased costs.
Innovation Solution
Implementing a hub and spoke virtual network topology that allows for efficient onboarding of mesh networks, reducing the need for direct connections between spoke virtual networks and enabling scalable growth while maintaining compliance and access control, thereby overcoming peering link limitations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a mesh network architecture is used to provide connectivity among various LOBs and environments, then connectivity and access control are improved, but the number of peering links required increases significantly
Solution Approach 1:
The patent introduces virtual network hubs as intermediary components that mediate connections between spoke virtual networks. Instead of requiring direct peering links between all LOBs and environments (mesh topology), the hubs act as central routing points that enable indirect connectivity. This reduces the total number of peering links from O(n^2) in a full mesh to O(n) in a hub-and-spoke configuration, while maintaining the ability to route traffic between any two nodes through the hub infrastructure.
Solution Approach 2:
The patent segments the virtual network architecture into distinct hub and spoke components. The hub virtual networks handle inter-LOB connectivity and routing, while spoke virtual networks handle environment-specific traffic. This segmentation allows the system to scale by adding more spokes to existing hubs rather than creating new direct connections between all nodes, thereby managing peering link growth systematically.
2Reliability
If virtual network peering is used to provide isolation between various LOBs, then security and access control are improved, but the limit on the number of peering links prevents network expansion
Solution Approach 1:
Virtual network hubs serve as intermediary routing infrastructure that enables LOBs to maintain isolation through peering links while expanding network capacity. The hubs absorb the routing complexity and connection management, allowing multiple spoke virtual networks to connect to the same hub without requiring direct peering between each other. This intermediary layer enables network expansion beyond the traditional peering link limits while preserving security isolation.
Solution Approach 2:
The patent transitions from a two-dimensional direct connection model (LOB A directly peers with LOB B) to a three-dimensional hierarchical model (LOB A connects to Hub, Hub connects to LOB B). This dimensional change allows the system to scale connections exponentially by leveraging the hub's routing capabilities rather than being limited by linear peering link counts. The hub layer provides the additional dimension of routing intelligence that enables expansion.
3Adaptability or versatility
If a mesh network is replicated in the virtualized environment, then connectivity requirements are met, but significant rearchitecting and cost are required due to peering link limits
Solution Approach 1:
The patent uses virtual network hubs as intermediary components that enable mesh-like connectivity without requiring a full mesh implementation. The hubs provide the routing intelligence needed to simulate mesh behavior while using a simplified hub-and-spoke physical topology. This approach meets connectivity requirements for multiple LOBs and environments while avoiding the complexity of implementing actual mesh peering links between all nodes.
Solution Approach 2:
The patent changes the topological parameter from direct peer-to-peer connections to hub-mediated connections. By altering the connection model from O(n^2) direct links to O(n) hub-mediated links, the system achieves equivalent connectivity functionality with significantly reduced peering link requirements. This parameter change eliminates the need for significant rearchitecting while maintaining connectivity capabilities.
Data Source
AI summary
Techniques are disclosed for implementing networks in a virtualized computing environment. One or more spoke virtual networks are instantiated and connected to a first virtual network hub to form a first hub and spoke topology. One or more spoke virtual networks are instantiated and connected to a second hub virtual network to form a second hub and spoke topology. A virtual connection is established from the first virtual network hub to the second hub virtual network. The first and second hub and spoke networks are allocated to a user of the virtualized computing environment.