Multi-Route VPN Concentrator Selection for Stable Network Performance

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users connecting to VPNs through different VPN concentrators experience inconsistent performance due to varying latency, throughput, and packet loss, as they lack knowledge of which concentrator provides the best connection.

Innovation Solution

A multi-route virtual private network (VPN) system that optimizes network paths by selecting the optimal VPN concentrator using network performance data and policies, allowing for dynamic adjustments based on changing conditions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If users connect to multiple VPN concentrators, then network coverage and accessibility are improved, but network performance consistency deteriorates due to varying latency, throughput, and packet loss

Engineering Contradiction:
ImproveVPN access coverageVSAvoidnetwork performance consistency
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system continuously monitors network performance metrics (latency, throughput, packet loss) for each VPN concentrator and uses this feedback to dynamically update performance data. This real-time feedback mechanism enables the system to adapt to changing network conditions and guide users to optimal concentrators, resolving the contradiction between wide coverage and consistent performance.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The VPN concentrator performance data is dynamically updated and refreshed to reflect current network conditions. The system transitions from static concentrator selection to dynamic, condition-based selection, allowing users to be directed to the best available concentrator at any given moment, thereby maintaining performance consistency across multiple access points.

Inventive Principle:
Principle #15Dynamics

2Ease of operation

If users manually select VPN concentrators, then connection establishment is simplified, but network performance optimization deteriorates due to lack of knowledge about concentrator quality

Engineering Contradiction:
Improveconnection establishmentVSAvoidnetwork performance optimization
Core Design Contradiction:
Ease of operationVSProductivity

Solution Approach 1:

The system introduces an intermediary mechanism that automatically evaluates VPN concentrator performance and provides recommendations to users. This intermediary layer handles the complexity of performance assessment while maintaining simple user interaction, allowing users to benefit from optimized performance without needing to manually analyze concentrator quality metrics.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system enables automatic selection and optimization of VPN concentrators based on real-time performance data. The network infrastructure serves itself by automatically identifying and directing traffic to optimal concentrators without requiring user intervention or knowledge, thereby maintaining ease of operation while achieving performance optimization.

Inventive Principle:
Principle #25Self-service

3Productivity

If VPN concentrator performance data is continuously updated, then network performance optimization is improved, but data processing and system complexity increase

Engineering Contradiction:
Improvenetwork performance optimizationVSAvoiddata processing complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system updates VPN concentrator performance data at controlled intervals rather than continuously, using partial updates based on significant changes in network conditions. This approach maintains performance optimization benefits while reducing unnecessary data processing and system complexity associated with constant monitoring and updating.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS12592910B2Multi-route virtual private networking
Publication Date: 2026.03.31 CISCO TECHNOLOGY INC
  • US12592910B2 patent drawing
  • US12592910B2 patent drawing
  • US12592910B2 patent drawing

AI summary

A method, computer system, and computer program product are provided for a multi-route virtual private network. A virtual private network (VPN) concentrator generates network performance data indicating network conditions between the VPN concentrator and a server. The VPN concentrator receives additional network performance data indicating network conditions between at least one additional VPN concentrator and the server. The network performance data and the additional network performance data are provided to a client. In response to the client analyzing the network performance data and the additional network performance data to determine that a VPN connection to the server via the VPN concentrator satisfies one or more policy criteria, the VPN connection is established between the server and the client via the VPN concentrator.