A management server includes a configuration and management module processing server configuration information, including a VPN peer list and VLAN/subnet settings. The management server automatically calculates the VPN configuration information, including the VPN peer subnet route information identifying which of the subnets participating in the VPN are behind which of the routers and keys to establish VPN tunnels between those routers participating in the VPN. Each of the routers participating in the VPN includes a VPN tunnel with the other routers participating in the VPN, a set of data structures storing data identifying contact information for each of the subnets participating in the VPN, a combination of an IP address and port to reach one of routers that that subnet is behind, and a forwarding module to forward traffic between the subnets.

System and method for managing site-to-site vpns of a cloud managed network

A system for streaming packet captures over the Internet includes multiple network access devices, each operating as one of a gateway device, a wireless access point, and a network switch, and a management server communicatively coupled to the network access devices over the Internet for managing the network access devices. The management server maintains a persistent hypertext transport protocol (HTTP) connection with each of the network access devices over the Internet. The management server is to generate a bytecode based on a filtering expression for packet captures (PCAPs) representing one or more PCAPs filtering rules, transmit the bytecode to the network access devices without requiring the network access devices to compile the PCAPs filtering rules, receive PCAPs from the network access devices captured by the network access devices based on the PCAPs filtering rules, and merge the PCAPs received from the network access devices into merged PCAPs.

Method for streaming packet captures from network access devices to a cloud server over HTTP

A cloud broker gateway interfaces with an enterprise network and one or more public cloud networks, including a first public cloud and a second public cloud. The cloud broker gateway receives a request for one or more computing resources from a tenant associated with the enterprise network, and directs the request to the first public cloud based on a brokerage policy for the tenant. The cloud broker gateway receives a response indicating the first public cloud cannot provide the one or more computing resources, and redirects the request to the second public cloud based on the brokerage policy for the tenant. The cloud broker gateway also establishes a hybrid cloud that provides access to the one or more computing resources between the second public cloud and the enterprise network.

Inter-cloud broker for hybrid cloud networks

Network policies can be used to optimize the flow of network traffic between virtual machines (VMs) in a hybrid cloud environment. In an example embodiment, one or more policies can drive a virtual switch controller, a hybrid cloud manager, a hypervisor manager, a virtual switch, or other orchestrator to create one or more direct tunnels that can be utilized by a respective pair of VMs to bypass the virtual switch and enable direct communication between the VMs. The virtual switch can send the VMs network and security policies to ensure that these policies are enforced. The VMs can exchange security credentials in order to establish the direct tunnel. The direct tunnel can be used by the VMs to bypass the virtual switch and allow the VMs to communicate with each other directly.

Policy-driven switch overlay bypass in a hybrid cloud network environment

In one embodiment, a request may be received from a first cloud network of a hybrid cloud environment to transmit data to a second cloud network of the hybrid cloud environment, wherein the request can include a security profile related to the data. The security profile may be automatically analyzed to determine access permissions related to the data. Based at least in part on the access permissions, data can be allowed to access to the second cloud network.

Hybrid cloud security groups

A method may include receiving a request to establish a quality of service (QoS) policy that identifies a desired QoS associated with traffic being transported by a network; generating a QoS model based on the identified desired QoS, where the QoS model includes a class of service (CoS) and corresponding forwarding priorities associated with the traffic; retrieving a service level agreement (SLA), associated with a client device that is interconnected to a network node associated with the network, where the SLA includes a particular CoS and corresponding other forwarding priorities for packets associated with the client device; creating a QoS provisioning policy based on the QoS model and the SLA, where the creating includes mapping the CoS to the particular CoS or mapping the forwarding priorities to the other forwarding priorities; and transmitting, to the network node, the QoS provisioning policy that permits the network node to process the packets in a manner that complies with the QoS model or the SLA.

Suganthi Srinivasan

Papers

Generating and enforcing a holistic quality of service policy in a network