Multi-Network-Segment Gateway Routing for Scalable Cloud Connectivity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in efficiently managing large numbers of end-to-end network segments across customer-premise and cloud-based resources, requiring significant computing and memory resources and lacking flexible, scalable connectivity solutions.
Innovation Solution
A software-defined multi-network-segment gateway (MNSG) managed by a cloud provider network, utilizing route signaling nodes, data plane nodes, and control plane nodes to establish and manage end-to-end network segments, enabling efficient routing and configuration of virtual networks with reduced resource requirements through labeled packet forwarding and scalable node management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional gateway systems are used to manage network segments, then routing functionality is provided, but computing and memory resources are consumed excessively
Solution Approach 1:
The gateway functionality is segmented into separate control plane nodes and data plane nodes. Control plane nodes handle routing decisions and policy management, while data plane nodes handle packet forwarding. This segmentation allows each component to be optimized independently, reducing overall resource consumption while maintaining routing functionality.
Solution Approach 2:
The patent introduces intermediary components including control plane nodes that mediate between data plane nodes and the routing decision-making process. These intermediaries manage the separation of control and data planes, enabling efficient resource utilization by allowing data plane nodes to operate with minimal computational overhead focused solely on packet forwarding.
2Productivity
If existing gateway systems manage network segments, then connectivity is established, but scalability is limited
Solution Approach 1:
The gateway system employs dynamic resource allocation where control plane nodes can be dynamically added or removed based on the number and complexity of network segments being managed. Data plane nodes can be dynamically scaled to handle varying traffic loads, enabling the system to adapt to changing scalability requirements without disrupting ongoing connectivity.
Solution Approach 2:
The patent introduces a hierarchical dimension to gateway architecture with multiple levels of control plane nodes and data plane nodes organized in tiers. This dimensional organization enables scalable management of thousands of network segments by distributing functionality across hierarchical levels rather than relying on a single monolithic gateway.
3Object-affected harmful factors
If network segments are isolated for security, then security is improved, but administrative efficiency is reduced
Solution Approach 1:
The control plane nodes implement feedback mechanisms that automatically propagate security policies and routing changes to data plane nodes and network segments. This feedback system maintains security isolation while improving administrative efficiency by eliminating manual configuration synchronization and enabling centralized policy management.
Solution Approach 2:
Control plane nodes serve multiple functions including security policy enforcement, routing decision-making, and administrative management. This multi-functionality consolidates administrative operations while maintaining security isolation, as the universal control plane can manage diverse network segments through standardized interfaces and protocols.
Data Source
AI summary
In response to a programmatic request, configuration information representing a multi-network-segment gateway established on behalf of a customer is stored at a networking service. In response to another programmatic request, a communication session is established between a route signaling node of the gateway and a routing information source located at a customer premise. In response to additional programmatic input, the networking service stores an indication that the gateway is to be used to transfer packets between a cloud-side virtual network and a customer-side virtual network. The routing information exchanged in the session pertains to the cloud-side and customer-side virtual network, and is used to transfer data packets between the two virtual networks.