Server Assisted Network Discovery for Dynamic VPN Tunneling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional carrier enterprise services, such as VPN, rely on complex workflows and 'designed' circuits, making network resource management difficult, especially in terms of discovery and on-demand setup, leading to cumbersome changes and limited fault tolerance.
Innovation Solution
The implementation of Server Assisted Network Discovery (SAND) systems, where each network element obtains information from a server to determine the optimal connection for creating VPN tunnels, enabling dynamic and scalable network configurations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If complex workflows and designed circuits are used for VPN services, then network resource assignment is specific and controlled, but network discovery and on-demand setup become difficult and cumbersome
Solution Approach 1:
The patent introduces a server as an intermediary component that receives service requests from network elements, determines appropriate network resources, and orchestrates tunnel establishment. This mediator server simplifies the discovery process by centralizing the logic for matching service requests with available network resources, eliminating the need for complex peer-to-peer discovery workflows between network elements.
Solution Approach 2:
The patent enables network elements to autonomously initiate service requests and receive automated responses for tunnel establishment. The system provides self-service capabilities where network elements can request VPN services on-demand without manual configuration, and the server automatically provisions the necessary resources and establishes connections, reducing operational complexity.
2Ease of operation
If static and end-to-end circuit designs are implemented, then network connections are stable and predetermined, but changes and updates become complex and cumbersome
Solution Approach 1:
The patent transforms the static network configuration model into a dynamic one where tunnel endpoints and parameters can be modified on-demand. The server receives update requests, determines new appropriate resources, and reconfigures tunnels dynamically without requiring complete redesign. This enables flexible updates while maintaining stable operational characteristics during transitions.
Solution Approach 2:
The server performs preliminary determination of appropriate network resources before actual tunnel establishment or modification. By pre-evaluating available resources and determining optimal configurations in advance, the system prepares update paths that minimize disruption and maintain stability during transitions from static to dynamic configurations.
3Reliability
If centralized Telco OSS setup is used for VPN segments, then network connections are reliably established, but failover and recovery options are limited
Solution Approach 1:
The patent implements feedback mechanisms where the server continuously monitors network conditions, tunnel status, and resource availability. Based on this feedback, the server can dynamically adjust tunnel configurations, initiate failover to alternative resources, and recover from failures by determining new appropriate network elements. This feedback-driven approach enhances fault tolerance while maintaining reliable connection establishment.
Solution Approach 2:
The system prepares alternative network resources and failover paths in advance by maintaining awareness of available network elements and their capabilities. When failures occur, pre-identified backup resources can be activated quickly, providing cushioning against service disruption and enhancing overall system reliability and fault tolerance.
Data Source
AI summary
Systems or methods that may be used to assist in distributed flow whereby each network element obtains information from a server so a first network element has information to determine what network element to connect with to create virtual private network tunnels associated with a virtual private network service.