Virtual Datacenter Connectivity With Centralized Gateway Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprises face challenges in connecting workloads across multiple public clouds and on-premises/branch datacenters without relying on public Internet traffic, and managing these workloads within their own infrastructure.
Innovation Solution
A cloud management platform enables the definition of connectivity groups among virtual datacenters, configuring centralized and edge routers to route traffic within and between virtual datacenters, allowing secure connections across public clouds and on-premises environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If enterprises use multiple public clouds and on-premises datacenters with native cloud offerings, then workloads can be distributed across different cloud providers, but connectivity between these workloads becomes difficult without traffic traveling through the public Internet
Solution Approach 1:
The patent introduces a cloud management platform as an intermediary layer that orchestrates connectivity between virtual datacenters across multiple public clouds and on-premises environments. This platform establishes private network connections (e.g., using VPC peering, transit gateways, or direct network links) to enable direct traffic flow between workloads without routing through the public Internet, thus maintaining reliable connectivity while supporting multi-cloud distribution
2Ease of operation
If enterprises use native cloud provider managed workloads, then cloud provider connectivity features (e.g., AWS VPC transit gateway) are available, but enterprises lose management control over their workloads
Solution Approach 1:
The patent segments the management control by introducing a virtual datacenter abstraction layer that separates workload management from cloud provider infrastructure. Enterprises can use cloud provider connectivity features for network infrastructure while maintaining independent management control over their workloads through the virtual datacenter management plane, allowing them to orchestrate connectivity and management policies without ceding control to cloud providers
3Ease of operation
If traffic travels through the public Internet to connect workloads across different datacenters, then connectivity is achieved, but security and performance are degraded
Solution Approach 1:
The cloud management platform acts as an intermediary that establishes direct private network connections between virtual datacenters, bypassing the public Internet for workload traffic. This enables secure, high-performance connectivity through dedicated network paths while the platform manages the complexity of connection establishment across different cloud providers and on-premises environments
Data Source
AI summary
Some embodiments provide a method that receives (i) definition of a group of virtual datacenters and (ii) addition of at least two virtual datacenters to the group. Each virtual datacenter is defined in a public cloud and includes a set of network management components and a set of network endpoints connected by a logical network that is managed by the network management components of the virtual datacenter. Based on the definition of the group, the method configures a gateway router to which each of the virtual datacenters of the group connect. The gateway router is for routing traffic between the virtual datacenters of the group. The method also configures, at each respective virtual datacenter, a respective router to route data traffic between the respective virtual datacenter and the other virtual datacenters to route traffic for the other virtual datacenters to the gateway router.