DYNAMIC SECURED NETWORK IN A CLOUD ENVIRONMENT

摘要

The disclosure presents systems, methods and computer program products relating to an overlay network in a cloud environment. A management machine may manage an overlay network. Machine(s), which may be provided by cloud provider(s), may be added to or removed from the overlay network. Data relating to a machine may be gathered and configuration data may be determined, for example when the machine is being added to the overlay network. A device associated with a user authorized for the overlay network may connect to the overlay network. The overlay network may include one or more secure tunnels wherein a private IP address or public IP address may encapsulate an overlay IP address.

主权项

1. A method of adding a machine provided by a cloud provider to an overlay network, the method performed by the machine and comprising:
gathering data relating to the machine, including a private internet protocol (IP) address of the machine within a network of the cloud provider; receiving or determining configuration data for connecting the machine to the overlay network, including an overlay IP address for the machine in the overlay network, said configuration data being at least partly dependent on said gathered data; and connecting the machine to the overlay network in accordance with at least part of said configuration data, including establishing at least one secure tunnel, wherein for any secure tunnel a private IP address or a public IP address of said machine is used to encapsulate said overlay address.