SYNCHRONIZING A ROUTING-PLANE AND CRYPTO-PLANE FOR ROUTERS IN VIRTUAL PRIVATE NETWORKS

摘要

Techniques are presented herein for optimizing secure communications in a network. A router in a virtual private network determines whether or not it has successfully registered with a key server that provides cryptographic keys for routers in the virtual private network. The router stores state information that is indicative of whether or not the router has successfully registered with the key server.

主权项

1. A method comprising:
at a router in a virtual private network, synchronizing routing operations with cryptographic operations of the router by: determining whether or not the router has successfully registered with a key server that provides cryptographic keys for routers in the virtual private network; storing state information that is indicative of whether or not the router has successfully registered with the key server; and advertising bootstrap routing information in the virtual private network that enables the router to send and receive communications with the key server, wherein the bootstrap routing information comprises full routing information that includes subnetwork routing information associated with the router if the router has successfully registered with the key server.