Managing digital certificates for WAN optimization over content delivery networks

摘要

Digital certificates are distributed to WAN optimization modules in organization and content delivery networks to securely optimize network traffic. The content delivery network identifies edge WAN optimization modules for use with each combination of organizations and their cloud services and distributes digital certificates accordingly. Peering digital certificates for establishing inner connections between organization and edge WAN optimization modules are exchanged via one or more management portals. Shadow digital certificates for establishing outer connections between WAN optimization modules and clients are generated in the form of certificate signing requests. Configuration information identifies any additional cloud services associated with a given cloud service and generate corresponding additional certificate signing requests. Certificate signing requests are digitally signed by a certificate signing authority associated with the organization and then returned via the one or more management portals to the allocated edge WAN optimization modules. Digital certificates may be rotated for security purposes.

主权项

1. A method of exchanging digital certificates in a network traffic optimization system, the method comprising:
generating a first digital certificate associated with a first WAN optimization module in a first network, wherein the first network includes multiple WAN optimization modules; forwarding the first digital certificate to at least a first management portal; using the first management portal, identifying at least a second WAN optimization module in a second network allocated to optimize network traffic from the first WAN optimization module, wherein the second network corresponds to a content delivery network, wherein the second WAN optimization module includes an edge WAN optimization module included in the content delivery network, and wherein the content delivery network includes multiple edge WAN optimization modules; and distributing the first digital certificate to the identified second WAN optimization module.