Patent ID: 11916785
Assignee: APPLE INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 10:
11. A computer-implemented method, comprising:
generating, a routing table to be used at a plurality of network traffic sources, the routing table configured to cause the plurality of network traffic sources to route traffic, by:
identifying network traffic to be routed via a virtual network;
determining a source zone and a destination of the network traffic;
identifying that the network traffic is cross-zone traffic, where the destination is in a routable space protected by a plurality of stateful firewall instances or external network traffic, where the destination is outside the routable space protected by the plurality of stateful firewall instances;
when the network traffic is the external network traffic, routing the network traffic through a particular one of the plurality of stateful firewall instances assigned to the source zone; and
otherwise, when the network traffic is the cross-zone traffic, routing the network traffic through a second particular one of the plurality of stateful firewall instances assigned to a cross-zone pair, the cross-zone pair comprising the source zone and a destination zone associated with the destination of the network traffic; and

otherwise, when the network traffic is inner-zone traffic, routing the network traffic through a stateful firewall instance associated with a common zone of the source zone and the destination; and

providing the routing table to the plurality of network traffic sources to cause the plurality of network traffic sources to route the network traffic.