US 11,895,081 B2
Distributed network address translation over network environments
Victor Manuel Moreno, Carlsbad, CA (US); and Sanjay Kumar Hooda, Pleasanton, CA (US)
Assigned to Cisco Technology, Inc., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Feb. 9, 2022, as Appl. No. 17/667,952.
Application 17/667,952 is a continuation of application No. 16/685,969, filed on Nov. 15, 2019, granted, now 11,265,289.
Prior Publication US 2022/0174037 A1, Jun. 2, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 61/2575 (2022.01); H04L 12/46 (2006.01); H04L 61/2592 (2022.01); H04L 51/04 (2022.01); H04L 61/5038 (2022.01); H04L 61/2557 (2022.01)
CPC H04L 61/2557 (2013.01) [H04L 12/4633 (2013.01); H04L 12/4679 (2013.01); H04L 51/04 (2013.01); H04L 61/2575 (2013.01); H04L 61/2592 (2013.01); H04L 61/5038 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A physical server disposed in an underlay of physical servers that execute a virtual network overlay, the physical server comprising:
one or more processors; and
one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to:
establish, by a first edge node of the virtual network overlay, a connection to a client device having a device address;
send, by the first edge node, a first registration message to a control plane node of the virtual network overlay;
look up, by the control plane node, a network address translation (NAT) policy;
assign, by the control plane node, a subnet address to the client device as a NAT address based on the NAT policy;
record, by the control plane node, a first mapping and a second mapping between the device address and the assigned NAT address, each of the first mapping and the second mapping being associated with the first edge node;
send, by the control plane node, a confirmation message to the first edge node indicating the first mapping and the second mapping between the device address and the NAT address;
establish, by a second edge node of the virtual network overlay, a connection to the client device;
send, by the second edge node, a second registration message to the control plane node, the first registration message and the second registration message respectively comprising a same Endpoint ID (EID) of the client device; and
update, by the control plane node, each of the first mapping and the second mapping from being associated with the first edge node to being associated with the second edge node.