US 11,902,240 B2
Methods and systems for efficient virtualization of inline transparent computer networking devices
Richard Goodwin, York, ME (US); Paul Sprague, North Berwick, ME (US); Peter Geremia, Portsmouth, NH (US); and Sean Moore, Hollis, NH (US)
Assigned to Centripetal Networks, LLC, Portsmouth, NH (US)
Filed by Centripetal Networks, LLC, Portsmouth, NH (US)
Filed on Jan. 27, 2023, as Appl. No. 18/102,378.
Application 18/102,378 is a continuation of application No. 17/698,164, filed on Mar. 18, 2022, granted, now 11,570,138.
Application 17/698,164 is a continuation of application No. 17/395,120, filed on Aug. 5, 2021, granted, now 11,316,823, issued on Apr. 26, 2022.
Claims priority of provisional application 63/071,174, filed on Aug. 27, 2020.
Prior Publication US 2023/0179563 A1, Jun. 8, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 45/00 (2022.01); H04L 61/2521 (2022.01); H04L 61/2514 (2022.01); H04L 101/622 (2022.01); H04L 101/668 (2022.01)
CPC H04L 61/2528 (2013.01) [H04L 45/68 (2013.01); H04L 61/2514 (2013.01); H04L 2101/622 (2022.05); H04L 2101/668 (2022.05)] 40 Claims
OG exemplary drawing
 
1. A cloud computing network configured to send packets between a network address translation (NAT) gateway and a second virtual device, via a virtual bump-in-the-wire (BITW) device, the cloud computing network comprising:
one or more processors;
the NAT gateway, wherein the NAT gateway is configured to interface between a public network and the cloud computing network;
the virtual BITW device, comprising:
a first interface having a private Internet Protocol (IP) address in a first subnet;
a second interface having a private IP address in a second subnet; and
a fast path between the first interface and the second interface and configured to apply packet-filtering logic to traffic received by the virtual BITW device; and
the second virtual device,
wherein the NAT gateway is configured to:
receive first packets indicating a public IP address of the second virtual device as a destination IP address;
modify the destination IP address of the first packets to be the private IP address of the first interface of the virtual BITW device; and
send the first packets to the first interface of the virtual BITW device, and
wherein the virtual BITW device is configured to:
receive, via the first interface, the first packets from the NAT gateway;
modify the destination IP address of the first packets to be a private IP address of the second virtual device; and
apply, using the fast path, the packet-filtering logic to the first packets received via the first interface; and
send, based on the packet-filtering logic and via the second interface, at least a portion of the first packets, and
wherein a cloud routing table of the cloud computing network is configured to cause second packets, sent by the second virtual device and destined for a host outside the cloud computing network, to be received by the second interface of the virtual BITW device.