OVERLAY NETWORK WITH POSITION INDEPENDENT INSERTION AND TAP POINTS

摘要

Embodiments are directed to managing secure communication between a plurality of node computers over a network. If overlay networks for node computers are provided for communicating between the node computers, a mesh network may be configured. If a node computer that may be associated with the overlay networks sends a communication to other node computers also associated with the overlay networks, a gateway computer associated with the node computer may perform actions to process the communication. The gateway computer may select an overlay network based on the node computer. Target gateway computers associated with the other node computers may be determined based on the overlay network and the mesh network. Physical paths from the gateway computer to the target gateway computers may be determined. The gateway computer may send the communication to the target gateway computers over the physical paths and then to the other node computers.

主权项

1. A method for managing secure communication between a plurality of node computers over a network, wherein execution of logic by a network computing platform performs actions, comprising:
when a node computer associated with one or more overlay networks for a mesh network sends a communication to one or more other node computers also associated with the one or more overlay networks, employing a gateway computer associated with the node computer to perform further actions, comprising:
determining one or more target gateway computers that are associated with the one or more other node computers based on a selected overlay network and a topology of the mesh network, wherein one or more physical paths are determined for securely communicating between the gateway computer and the one or more target gateway computers based on the topology, and wherein the determining of the one or more physical paths, based on the mesh network's topology, includes a modification to the one or more physical paths to include a route to one or more traffic management computers;identifying one or more network segments of the mesh network that are available for priority communication separate from the one or more physical paths; andsending the communication to the one or more target gateway computers over the one or more physical paths, wherein the one or more target gateway computers securely provide the communication to the one or more other node computers.