Patent ID: 11902240
Assignee: CENTRIPETAL NETWORKS, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 20:
21. A method comprising:
deploying a virtual bump-in-the wire (BITW) device in a virtual private cloud network, wherein the virtual BITW device comprises:
a first interface having a private Internet Protocol (IP) address in a first subnet;
a second interface having a private IP address in a second subnet; and
a fast path between the first interface and the second interface and configured to apply packet-filtering logic to traffic received by the virtual BITW device;

configuring a network address translation (NAT) gateway, that interfaces between a public network and the virtual private cloud network, to modify a destination IP address of first packets destined for a second virtual device by configuring the NAT gateway to translate a public IP address of the second virtual device to the private IP address of the first interface of the virtual BITW device;
configuring the virtual BITW device to send, via the fast path and based on the packet-filtering logic, at least a portion of the first packets received via the first interface, to the second virtual device by configuring the virtual BITW device to modify destination IP addresses of packets received by the first interface to be the private IP address of the second virtual device; and
configuring a cloud routing table of the cloud computing network to cause second packets, sent by the second virtual device and destined for a host outside the cloud computing network, to be received by the second interface of the virtual BITW device.