公开(公告)号：US11870751B2

公开(公告)日：2024-01-09

申请号：US17498333

申请日：2021-10-11

Applicant: Cisco Technology, Inc.

Inventor： Aloys Christophe Augustin ,  Mohammed Hawari ,  Nathan Roland Maryan Skrzypczak ,  Jérôme Tollet

IPC: H04L61/4511 ,  H04L61/2592 ,  H04L12/46 ,  H04L61/5046 ,  H04L101/695

CPC classification number: H04L61/4511 ,  H04L12/46 ,  H04L61/2592 ,  H04L61/5046 ,  H04L2101/695

Abstract: An approach to establish connections between clusters having overlapping IP address ranges. A method includes receiving, at a service discovery server, from a first node in a first cluster, a service discovery request including a unique name, determining, at the service discovery server, that the unique name resolves to a destination IP address of a second node in a second cluster, determining that the destination IP address overlaps with an IP address range associated with the first cluster, in response to determining that the destination IP address overlaps with the IP address range belonging to the first cluster, configuring a gateway to expect a network connection request from the first node that includes an IP address of the gateway, and sending a service discovery response to the first node, the service discovery response including the IP address of the gateway, but not the destination IP address.

公开(公告)号：US20230111266A1

公开(公告)日：2023-04-13

申请号：US17498333

申请日：2021-10-11

Applicant: Cisco Technology, Inc.

Inventor： Aloys Christophe Augustin ,  Mohammed Hawari ,  Nathan Roland Maryan Skrzypczak ,  Jérôme Tollet

IPC: H04L29/12 ,  H04L12/46

Abstract: An approach to establish connections between clusters having overlapping IP address ranges. A method includes receiving, at a service discovery server, from a first node in a first cluster, a service discovery request including a unique name, determining, at the service discovery server, that the unique name resolves to a destination IP address of a second node in a second cluster, determining that the destination IP address overlaps with an IP address range associated with the first cluster, in response to determining that the destination IP address overlaps with the IP address range belonging to the first cluster, configuring a gateway to expect a network connection request from the first node that includes an IP address of the gateway, and sending a service discovery response to the first node, the service discovery response including the IP address of the gateway, but not the destination IP address.

公开(公告)号：US20250119471A1

公开(公告)日：2025-04-10

申请号：US18376676

申请日：2023-10-04

Applicant: Cisco Technology, Inc.

Inventor： Vincent E. Parla ,  Jerome Tollet ,  Aloys Christophe Augustin ,  Mohammed Hawari

IPC: H04L67/141 ,  H04L9/40

Abstract: Techniques for utilizing a portion of a communication session identifier (e.g., a Session-ID, an SPI, a CID, a DCID, and/or the like) to indicate a target routing device (e.g., a VPN and/or ZTNA termination device) for establishing control plane session(s) and/or data plane session(s) at wire-speed in a networked computing environment. The routing device(s) of a networked computing environment may generate a communication session identifier and send the communication session identifier to the client device, such that subsequent packets send from the client device may be forwarded to the proper routing device indicated by the communication session identifier for establishment of one or more data plane sessions. Additionally, data plane sessions may be established using a Resumed Handshake rather than a full handshake that is typically required, as Session Resumption utilizes the assigned communication session identifier for mapping.