Multicast proxy for partitioned networks

摘要

A method for implementing multicast data exchange over a partitioned network having an encrypted domain with HAIPE devices at the edges consists of proxies running at an ingress edge and at egress edges of the encrypted domain. The proxies at the ingress edge device modify the multicast data packet to replace the destination address with the address of a proxy running on an egress edge device, such that the encrypted domain routes the packet directly to the proxy at the egress edge device without processing it as a multicast data packet. At the egress edge devices, the proxies restore the original address and send the multicast packets to the appropriate destinations.

主权项

1. A system for implementing multicast messaging in a partitioned network, said partitioned network including an encrypted domain, comprising:
two or more devices acting as edge devices to the encrypted domain of said network, said devices running a multicast proxy module; wherein said multicast proxy module performs the following functions for sending multicast messages:
(a) intercepting outgoing multicast packets;(b) determining which edge devices have intended recipients of said multicast messages connected thereto;(c) for each edge device having one or more intended recipients attached thereto, removing the multicast address and replacing it with the address of the edge device to which the intended recipient is connected;(d) storing the multicast address elsewhere in said multicast packet; and(e) sending the modified multicast packet through said encrypted domain to each of said other edge devices having intended recipients connected thereto; and further wherein said multicast proxy module performs the following functions for receiving multicast messages:
(a) receiving modified multicast packets from said encrypted domain of said network;(b) removing the address of the receiving edge device from the address field of the modified multicast packet;(c) retrieving the multicast address from elsewhere in the multicast packet and moving it to said address field of the multicast packet; and(d) transmitting the multicast packet to the intended recipients.