US 11,968,110 B2
Cloud network reachability analysis for virtual private clouds
Hui Liu, San Ramon, CA (US); Leslie Choong, Mountain View, CA (US); Hongkun Yang, San Jose, CA (US); Shishir Agrawal, Mountain View, CA (US); Raj Yavatkar, Mountain View, CA (US); Tianqiong Luo, San Clara, CA (US); Gargi Adhav, San Jose, CA (US); and Steffen Smolka, Ithaca, NY (US)
Assigned to Google LLC, Mountain View, CA (US)
Filed by Google LLC, Mountain View, CA (US)
Filed on Aug. 31, 2022, as Appl. No. 17/823,860.
Application 17/823,860 is a continuation of application No. 16/840,084, filed on Apr. 3, 2020, granted, now 11,477,110.
Claims priority of provisional application 62/830,159, filed on Apr. 5, 2019.
Prior Publication US 2023/0006915 A1, Jan. 5, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 12/28 (2006.01); H04L 41/12 (2022.01); H04L 45/02 (2022.01); H04L 45/74 (2022.01)
CPC H04L 45/02 (2013.01) [H04L 41/12 (2013.01); H04L 45/74 (2013.01)] 16 Claims
OG exemplary drawing
 
9. A system comprising:
data processing hardware; and
memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations comprising:
receiving, from a user device, a virtual private cloud (VPC) reachability request requesting a reachability status of network traffic from a source Internet Protocol (IP) address of a VPC network to a destination IP address of the VPC network, the VPC reachability request comprising a protocol type;
obtaining network configuration information defining a configuration of the VPC network;
generating, using a model and the network configuration information, a simulated forwarding path for a data packet based on the source IP address and the destination IP address, the simulated forwarding path comprising a plurality of hops;
determining, based on a source instance and a destination instance of the simulated forwarding path, a type of the simulated forwarding path;
determining, based on the type of the simulated forwarding path, a path specific check comprising one or more state specific evaluations for the source instance and the destination instance of the simulated forwarding path;
determining, using the path specific check on the simulated forwarding path, that the destination IP address from the source IP address is unreachable;
in response to determining that the destination IP address is unreachable, generating a reachability report, the reachability report comprising:
each hop of the plurality of hops of the simulated forwarding path; and
a rationale that the destination IP address from the source IP address is unreachable; and
providing the reachability report to the user device.