Ensuring symmetric routing to private network

摘要

Aspects of the subject matter described herein relate to symmetric routing to a private network. In aspects, a remote client may try to connect to an entity of a private network using a non-routable network address. Upon detecting that connectivity is not established or not possible via a given network address, the client may obtain network data associated with a gateway that provides access to the private network and create a virtual interface where the gateway is the next-hop router. After creating the virtual interface, the client may communicate with entities of the private network using the virtual interface of the client. By sending traffic through the virtual interface with a source address having a prefix associated with the gateway, the client may ensure that traffic sent to and from the private network traverses the gateway.

主权项

1. A client apparatus comprising:
a processing unit; a memory; a bus which couples the processing unit to the memory; a first interface which communicates with a public network which is external to the client apparatus, the first interface is associated with a first network address of the client apparatus; a second interface which communicates with a gateway that provides access to a private network, the second interface associated with a second network address of the client apparatus, the second interface is a virtual interface with the gateway as the next-hop router at least for traffic from the client apparatus which is directed to an entity of the private network; a connection detector which provides an indication that connectivity of the client apparatus to the private network has not been established after a connection attempt was made via the first interface; and a connection manager which uses the first interface to attempt to help establish the connectivity and favor private network addressing over public network addressing in attempts to connect with an entity of the private network across a global network from outside the private network; the client apparatus responding to the indication that connectivity to the private network has not been established in that the client apparatus attempts to obtain a public network address of a server that is connected to the private network, by obtaining from the server network data associated with the gateway, wherein the network data includes at least a prefix of a second network address, the private network sends traffic addressed to a destination address that starts with the prefix to the gateway, and the client apparatus creates the second interface with the network data.