Patent ID: 11902240
Assignee: CENTRIPETAL NETWORKS, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 30:
31. A method for sending packets in a virtual private cloud network between a network address translation (NAT) gateway and a second virtual device, via a virtual bump-in-the-wire (BITW) device, the method comprising:
receiving, by the NAT gateway, first packets indicating a public IP address of the second virtual device as a destination IP address, wherein the NAT gateway is configured to interface between a public network and the virtual private cloud;
modifying, by the NAT gateway, the destination IP address of the first packets to be a first private IP address of a first interface of the virtual BITW device, wherein the private IP address of the first interface is in a first subnet;
sending, by the NAT gateway, the first packets to the first interface of the virtual BITW device;
receiving, via the first interface, the first packets from the NAT gateway;
applying, using a fast path of the virtual BITW device, packet-filtering logic to the first packets received via the first interface;
modifying the destination IP address of the first packets to be a private IP address of the second virtual device; and
sending, by the virtual BITW, based on the packet-filtering logic, and via a second interface having a private IP address in a second subnet, at least a portion of the first packets,
wherein a cloud routing table of the cloud computing network is configured to cause second packets, sent by the second virtual device and destined for a host outside the cloud computing network, to be received by the second interface of the virtual BITW device.