Direct VPN Client Routing Bypassing Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing VPN technologies require communication through a VPN server, which can be inefficient for locally connected devices and burdensome to implement split tunneling, leading to unreliable connections.
Innovation Solution
A method for two VPN clients in the same local network to establish a direct connection by determining an optimal route that bypasses the VPN server, using public network addresses and routing metrics to configure a third VPN connection for secure, encrypted communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VPN clients communicate through a VPN server, then security and encryption are maintained, but communication efficiency deteriorates for locally connected devices
Solution Approach 1:
The patent segments VPN traffic into two categories: traffic between remote VPN clients (which should go through the server for security) and traffic between local VPN clients (which should communicate directly for efficiency). The system determines the location of destination clients and selectively routes traffic accordingly, applying different paths based on the segment of the network the destination resides in.
Solution Approach 2:
The patent introduces location information and routing metrics as intermediaries to enable intelligent route selection. These intermediaries carry data about client locations and network conditions, allowing the system to automatically determine whether to use the server path or direct local path without manual configuration.
2Productivity
If split tunneling is implemented to enable direct local communication, then communication efficiency improves, but implementation complexity and reliability deteriorate
Solution Approach 1:
The patent enables VPN clients to automatically determine their own location and the location of destination clients using embedded location information in routing metrics. The system self-configures optimal routes without requiring manual split tunneling configuration, reducing implementation complexity while maintaining efficiency improvements.
Solution Approach 2:
The patent uses routing metrics that provide feedback about client locations and network conditions. This feedback mechanism allows the system to dynamically adjust routes based on current network state, enabling efficient local communication while avoiding the complexity of static split tunneling configurations.
3Productivity
If VPN clients use public network addresses for direct connection, then communication efficiency improves, but connection reliability deteriorates without proper routing metrics
Solution Approach 1:
The patent performs preliminary actions by embedding location information in routing metrics before direct communication occurs. The system pre-determines client locations and prepares routing information, ensuring that when direct connections are established using public network addresses, the proper routing context is already in place to maintain reliability.
Data Source
AI summary
A client device establishes a first VPN connection with a VPN server. Traffic is sent from the client device through the first VPN connection that is destined to a different client device that has a second VPN connection with the VPN server. The client device receives a public network address of the different client device and routing metrics from the VPN server. Based at least in part on the routing metrics, the client device determines an optimal route to the different client device, where the optimal route is a connection between the client device and the different client device that does not traverse the VPN server. The client device establishes a VPN connection with the different client device and transmits traffic to that different client device using the VPN connection using the public network address of the different client device.