IP Tunnel Management with Dynamic Address Notification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional IP tunnel management requires static IP addresses at both ends, making it impossible to maintain connectivity when dynamic IP addresses change or when hosts reboot, as the tunnel cannot be connected via the original addresses.

Innovation Solution

A method for managing IP tunnels that involves building tunnels with dynamic addresses and known remote addresses, where notifications are sent to maintain connection by rebuilding the tunnel with changed addresses, using an intermediate server to update dynamic addresses if necessary, ensuring continuous connectivity even with address changes or host reboots.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If dynamic IP addresses are used for tunnel endpoints, then address flexibility and ease of host mobility are improved, but tunnel connectivity and reliability deteriorate when addresses change or hosts reboot

Engineering Contradiction:
Improveaddress flexibilityVSAvoidtunnel connectivity
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a tunnel management server as an intermediary between tunnel endpoints. The server maintains a mapping table that associates tunnel identifiers with current IP addresses, and provides address resolution services. When a tunnel endpoint's IP address changes, the endpoint notifies the management server, which updates the mapping table. Other endpoints can then resolve the correct current address through the management server, maintaining tunnel connectivity despite dynamic address changes.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If static IP addresses are used for tunnel endpoints, then tunnel connectivity and stability are improved, but address flexibility and ease of operation deteriorate

Engineering Contradiction:
Improvetunnel connectivityVSAvoidaddress flexibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent enables dynamic IP address assignment for tunnel endpoints while maintaining effective connectivity through the tunnel management server. Endpoints can obtain IP addresses dynamically through DHCP or other mechanisms, and the management server dynamically updates address mappings. This combines the flexibility of dynamic addressing with the connectivity reliability of managed tunnel endpoints, allowing addresses to change while maintaining stable tunnel connections.

Inventive Principle:
Principle #15Dynamics

3Ease of operation

If tunnel endpoints use dynamic IP addresses, then ease of host deployment and reconfiguration are improved, but the complexity of maintaining tunnel connections deteriorates

Engineering Contradiction:
Improvehost deploymentVSAvoidconnection maintenance
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent implements automatic address notification and update mechanisms. When a tunnel endpoint's IP address changes, the endpoint automatically notifies the tunnel management server. The management server automatically updates its mapping table and can proactively notify other endpoints of the address change. This automated process eliminates the need for manual tunnel reconfiguration, allowing dynamic addressing while simplifying connection maintenance through self-service address management.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8432922B2Method for managing IP tunnels
Publication Date: 2013.04.30 FORTINET INC
  • US8432922B2 patent drawing
  • US8432922B2 patent drawing
  • US8432922B2 patent drawing

AI summary

A method for managing Internet Protocol (IP) tunnels is provided. The method is executed by a local host. There is at least one IP tunnel planned between the local host and a remote host. The method comprises the following steps. If the local addresses of the tunnels include dynamic IP addresses, acquire the dynamic IP addresses. All tunnels with known remote addresses are built. If there are known remote addresses and the local addresses include dynamic IP addresses, send a notification to the remote host, wherein the notification includes all local dynamic IP addresses. If any local address changes, all tunnels with changed local addresses and known remote addresses are rebuilt. A message is received from the remote host and classified. If the message is a notification, the tunnels are updated according to the remote addresses included in the message, and an acknowledgement is sent back to the remote host.