Systems and methods for providing a multiple secure link architecture

摘要

Some embodiments disclosed herein include a MSL twin network address translator (NAT) that includes logic that, when executed by a processor, causes the MSL twin NAT to receive inbound datagram from MSL VPN and record a new VPN owner private IP address from a source IP address in the inbound datagram. In some embodiments the logic causes the MSL twin NAT to assign a new UPIP for the inbound datagram and client workstation and facilitate sending the inbound datagram to the client workstation.

主权项

1. A system for providing a multiple secure link (MSL) architecture, comprising:
a MSL virtual private network (VPN) component that includes first logic that, when executed by a processor, causes the system to perform the following:
create a first VPN tunnel between a client workstation and a first owner gateway;send an outbound datagram from the client workstation to the first owner gateway;receive an inbound datagram from the first owner gateway to the client workstation, wherein the inbound datagram includes a source internet protocol (IP) address and a destination IP address that is set to a VPN owner private IP address; andsend the inbound datagram with the destination IP address; and a MSL twin network address translator (NAT) that includes second logic that, when executed by the processor, causes the system to perform at least the following:
receive the inbound datagram from MSL VPN;record a new VPN owner private IP address from the source IP address in the inbound datagram;assign a new unique private IP (UPIP) address for the inbound datagram and the client workstation; andsend the inbound datagram to the client workstation, wherein the system additionally creates a second VPN tunnel between the client workstation and a second owner gateway while the first VPN tunnel is being utilized.