Overlay network with position independent insertion and tap points

摘要

Embodiments are directed to managing secure communication between a plurality of node computers over a network. If overlay networks for node computers are provided for communicating between the node computers, a mesh network may be configured. If a node computer that may be associated with the overlay networks sends a communication to other node computers also associated with the overlay networks, a gateway computer associated with the node computer may perform actions to process the communication. The gateway computer may select an overlay network based on the node computer. Target gateway computers associated with the other node computers may be determined based on the overlay network and the mesh network. Physical paths from the gateway computer to the target gateway computers may be determined. The gateway computer may send the communication to the target gateway computers over the physical paths and then to the other node computers.

主权项

1. A method for managing secure communication between a plurality of node computers over a network, wherein execution of logic by a network computing platform performs actions, comprising:
when one or more overlay networks for two or more of the plurality of node computers is provided for securely communicating, configuring a mesh network between the two or more node computers, wherein the mesh network includes one or more of a plurality of gateway computers that provide secure access to the two or more node computers; and when a node computer is associated with the one or more overlay networks and sends a communication to one or more other node computers also associated with the one or more overlay networks, a gateway computer associated with the node computer performs further actions, comprising:
selecting an overlay network based on the node computer and one or more characteristics of the communication with the one or more other node computers;determining one or more target gateway computers that are associated with the one or more other node computers based on the overlay network and a topology of the mesh network for secure communication; determining one or more physical paths for communication from the gateway computer to the one or more target gateway computers based on the topology of the mesh network, wherein the determining includes modifying the one or more physical paths to include a route to one or more traffic management computers based on the topology of the mesh network, and wherein the determining further includes modifying the one or more physical paths to include a route from the one or more traffic management computers to the one or more target gateway computers based on the topology of the mesh network; and
securely sending the communication to the one or more target gateway computers over the one or more physical paths, wherein the one or more target gateway computers securely provide the communication to the one or more other node computers.