Full-Mesh Proxyless VPC Connectivity via Direct Endpoint Peering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual private cloud (VPC) networks face challenges in establishing efficient, high-performance, and secure connectivity with other VPCs or on-premises devices, often requiring costly and resource-intensive data copying processes.
Innovation Solution
A system utilizing a software-defined networking (SDN) controller, on-host controller, and programmable packet switcher enables proxyless peering connections between networks by exchanging limited connectivity information, allowing direct communication between endpoints without proxies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of energy
If traditional VPC connectivity methods are used, then network connectivity between VPCs is established, but bandwidth consumption and memory usage increase due to data copying processes
Solution Approach 1:
The patent extracts and eliminates the unnecessary data copying process from traditional VPC connectivity methods. By implementing proxyless peer-to-peer connectivity, the system removes the intermediate copying step that consumes bandwidth and memory, allowing direct communication between VPCs while maintaining connectivity reliability.
Solution Approach 2:
The patent introduces a connectivity information exchange mechanism that acts as a lightweight intermediary. Instead of copying full data sets, the system exchanges only essential connectivity information (IP addresses, ports, routing details) between VPCs, enabling direct communication without the overhead of traditional data copying while preserving network reliability.
2Loss of energy
If traditional VPC connectivity methods are used, then network connectivity between VPCs is established, but memory consumption increases due to data copying processes
Solution Approach 1:
The patent removes the memory-intensive data copying operation from the connectivity establishment process. By using proxyless peer-to-peer communication, the system eliminates the need to store and manage copied data in memory, significantly reducing memory consumption while maintaining reliable network connectivity through direct endpoint communication.
Solution Approach 2:
The patent applies copying selectively and efficiently by exchanging only minimal connectivity information (such as routing tables and endpoint details) rather than copying entire data sets. This selective information exchange enables reliable connectivity while minimizing memory usage compared to traditional methods that copy extensive data structures.
3Productivity
If proxy-based connectivity is used, then network connectivity between VPCs is established, but communication performance decreases due to additional routing overhead
Solution Approach 1:
The patent replaces heavy proxy-based intermediaries with a lightweight connectivity information exchange mechanism. This intermediary only handles essential routing information exchange and then enables direct peer-to-peer communication, eliminating the continuous routing overhead imposed by proxies while maintaining connectivity between VPCs and improving overall communication performance.
Solution Approach 2:
The patent segments the connectivity function into two distinct parts: (1) a lightweight information exchange phase that establishes routing parameters, and (2) a direct peer-to-peer communication phase that handles actual data transfer. This segmentation eliminates the need for continuous proxy involvement in data transmission, reducing routing overhead and improving communication performance.
Data Source
AI summary
The present disclosure provides for full mesh connectivity between all endpoints in a VPC, including virtual machines, load balancers, routers, interconnects, virtual private networks, etc. Connectivity may be extended to on-premises devices, such as those connected via VPN and Interconnects. The connectivity is high performance, reliable, and secure.