SD-WAN DNS Resolution Using Measured Path Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Corporate networks face increased costs and performance issues due to reliance on expensive leased lines and unreliable consumer Internet for traffic routing, especially with the shift to mobile access and public cloud usage, necessitating a more efficient and secure network solution.
Innovation Solution
Establishing a virtual network over multiple public cloud datacenters using managed forwarding nodes (MFNs) and a logically centralized controller cluster to optimize routing, security, and performance across public clouds, allowing for dedicated or shared MFN usage based on network demands.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If corporate networks use expensive leased lines for secure connections, then reliability and security are improved, but network cost increases
Solution Approach 1:
The patent segments the network infrastructure by deploying distributed managed forwarding nodes (MFNs) in multiple public cloud datacenters instead of relying on a single centralized leased line infrastructure. This segmentation allows traffic to be routed through multiple paths across different cloud providers, maintaining reliability while reducing dependency on expensive dedicated lines.
Solution Approach 2:
The patent creates a universal virtual network overlay that can operate across multiple public cloud datacenters from different providers. This multi-functional infrastructure serves both secure corporate traffic and public cloud traffic simultaneously, eliminating the need for separate expensive leased lines while maintaining security and reliability requirements.
2Quantity of substance
If corporate networks rely on consumer Internet for traffic routing, then network cost decreases, but performance and reliability deteriorate
Solution Approach 1:
The patent introduces managed forwarding nodes (MFNs) as intermediary components that sit between consumer Internet access and the corporate virtual network. These MFNs provide secure routing, traffic management, and reliability guarantees while still allowing the use of more economical public Internet connections instead of expensive leased lines.
Solution Approach 2:
The patent implements dynamic routing capabilities where the virtual network can adaptively select optimal paths through multiple public cloud datacenters based on current network conditions, traffic demands, and performance requirements. This dynamic behavior enables the system to maintain reliability while utilizing cost-effective public Internet infrastructure.
3Reliability
If traffic is routed through corporate WAN gateways, then security is maintained, but traffic performance slows down
Solution Approach 1:
The patent segments security functions by distributing them across multiple managed forwarding nodes in different public cloud datacenters rather than concentrating all security processing at centralized corporate WAN gateways. This segmentation enables parallel security processing and reduces traffic bottlenecks while maintaining security requirements.
Solution Approach 2:
The patent adds a new dimensional approach by implementing security enforcement at the virtual network overlay level across multiple cloud datacenters, rather than relying solely on traditional perimeter-based gateway security. This multi-dimensional security architecture maintains protection while enabling faster traffic flows through distributed processing.
4Productivity
If multiple public cloud datacenters are used for virtual network, then network scalability and performance are improved, but system complexity increases
Solution Approach 1:
The patent implements feedback mechanisms where the controller continuously monitors network conditions, traffic patterns, and performance metrics across multiple public cloud datacenters. This feedback enables automatic routing optimization, load balancing, and resource allocation, simplifying the management of the multi-datacenter environment while maximizing scalability and performance benefits.
Solution Approach 2:
The patent introduces a controller as an intermediary management layer that abstracts the complexity of operating multiple public cloud datacenters. This controller handles routing decisions, resource allocation, and coordination across datacenters, allowing the system to achieve high scalability without proportionally increasing operational complexity for end users.
Data Source
AI summary
The method of some embodiment provides DNS service for an SD-WAN. The method receives a DNS request for a domain name (e.g., a FQDN) from one of the compute nodes connected to the SD-WAN (e.g., from a branch site or datacenter site, or a machine of a remote user). The method selects a particular network address (e.g., a particular IP address) from several network addresses (e.g., several IP addresses) of several different sets of servers that are associated with the domain name based on measurements taken by agents deployed in the SD-WAN and based on SD-WAN DNS-resolution selection criteria. The method provides the particular network address in response to the DNS request to the machine that sent the DNS request (e.g., to the branch site or datacenter that sent the DNS request, or to the machine of the remote user that sent the request).