US 11,929,988 B2
Dynamic selection of a VPNC gateway based on user behavior
Gopal Gupta, Bangalore (IN); Abhinesh Mishra, Bangalore (IN); Isaac Theogaraj, Bangalore (IN); and Aseem Sethi, Bangalore (IN)
Assigned to Hewlett Packard Enterprise Development LP, Spring, TX (US)
Filed by HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP, Houston, TX (US)
Filed on Feb. 9, 2021, as Appl. No. 17/171,963.
Prior Publication US 2022/0255900 A1, Aug. 11, 2022
Int. Cl. H04L 9/40 (2022.01); H04L 67/61 (2022.01)
CPC H04L 63/0272 (2013.01) [H04L 63/102 (2013.01); H04L 63/105 (2013.01); H04L 63/1425 (2013.01); H04L 67/61 (2022.05)] 19 Claims
OG exemplary drawing
 
1. A method comprising:
assigning criticality rankings to users based on one or more factors relating to behaviors of the users;
determining, by a branch gateway comprising a hardware processor, whether a primary virtual private network concentrator (VPNC) gateway is healthy, wherein the primary VPNC gateway is from a plurality of VPNC gateways across one or more data centers, the primary VPNC gateway to receive forwarded traffic from devices of the users, including a first device of a first user and a second device of a second user;
determining, by the branch gateway, whether a service is healthy, wherein the service is provided by a data center of the one or more data centers; and
based on a determination that the service is not healthy or a determination that the primary VPNC gateway is not healthy;
determining, by the branch gateway, whether the first user associated with the first device has a non-critical ranking and whether the first device from which first traffic is received is a new client device that has newly joined a network,
based on a determination that the first user has the non-critical ranking and the first device is a new client device, dynamically selecting, by the branch gateway, a secondary VPNC gateway from the plurality of VPNC gateways across the one or data centers for communicating the first traffic from the first device forwarded from the branch gateway to the secondary VPNC gateway,
determining, by the branch gateway, whether the second user associated with the second device has a critical ranking and whether the second device from which second traffic is received is a new client device that has newly joined the network, and
based on a determination that the second user has the critical ranking or the second device is not a new client device, preserving, by the branch gateway, a selection of the primary VPNC gateway for communicating the second traffic from the second device forwarded from the branch gateway to the primary VPNC gateway.