Hybrid Cloud Media Routing for Enterprise Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Purely cloud-centric communication solutions face issues with Quality of Service, security, higher bandwidth requirements, and latency, which are not effectively addressed by existing technologies.
Innovation Solution
A hybrid cloud and enterprise media processing solution is implemented, where the cloud communication application directs enterprise communication devices to use an enterprise media server for media streams, establishing a direct media path that avoids traversing the enterprise firewall/NAT, ensuring enhanced security and predictable Quality of Service while reducing bandwidth requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If media streams are routed through cloud infrastructure, then cloud-based communication services are enabled, but Quality of Service deteriorates due to higher latency and bandwidth requirements
Solution Approach 1:
The system segments the communication infrastructure into cloud-based application servers and enterprise-based media servers. The cloud handles signaling and control functions while enterprise media servers handle actual media processing, allowing each component to operate in its optimal environment.
Solution Approach 2:
The cloud application server acts as an intermediary that directs media streams to appropriate enterprise media servers. It establishes communication sessions and routes media traffic through enterprise infrastructure rather than processing all media itself, thus maintaining QoS while enabling cloud services.
2Adaptability or versatility
If media processing is fully cloud-based, then open modeled cloud centric solutions are achieved, but security deteriorates due to media traversing enterprise firewall/NAT
Solution Approach 1:
The solution extracts media processing functions from the cloud infrastructure and places them within the enterprise network boundary. Media streams are kept inside the enterprise network and do not traverse the firewall, while cloud services provide higher-level control and management functions.
Solution Approach 2:
Different parts of the system have different deployment locations optimized for their specific functions. Media processing is localized within the enterprise network for security, while application servers and signaling can be cloud-based for accessibility and scalability.
3Ease of operation
If media streams traverse through cloud infrastructure, then cloud communication applications can be deployed, but bandwidth requirements increase
Solution Approach 1:
The system segments traffic into signaling traffic (through cloud) and media traffic (through enterprise network). This separation allows cloud applications to be deployed easily while media streams use existing enterprise bandwidth infrastructure, avoiding additional bandwidth consumption.
Solution Approach 2:
The cloud application server serves as an intermediary that handles session management and routing decisions without being the path for media streams. This eliminates the need for cloud infrastructure to provide high-bandwidth media transport while still enabling cloud-based application deployment.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A request to establish a communication session is received at a cloud communication application (202). The request is from a first enterprise communication device to establish a communication session with a second communication device that is typically also within the enterprise. In response to receiving the request to initiate the communication session, the cloud communication application directs (204) the first enterprise communication device to use an enterprise media server for sending a media stream of the first communication session. This allows the cloud communication application to provide (206) one or more cloud services for the media stream via a communication channel that has been previously established between the cloud communication application and the enterprise media server. This results in the media stream being sent within the enterprise, thus, providing enhanced security. In addition, less bandwidth is required because the media streams do not have to be sent via the cloud.