Patent ID: 11916785
Assignee: APPLE INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A tangible, non-transitory, computer-readable medium, comprising computer-readable instructions that, when executed by one or more processors of a computer, cause the computer to:
identify network traffic to be routed via a virtual network;
determine a source zone and a destination of the network traffic;
identify whether the network traffic is cross-zone traffic, where the destination is in a routable space protected by a plurality of stateful firewall instances or external network traffic, where the destination is outside the routable space protected by the plurality of stateful firewall instances;
when the network traffic is the external network traffic, route the network traffic through a particular one of the plurality of stateful firewall instances assigned to the source zone; and
otherwise, when the network traffic is the cross-zone traffic, route the network traffic through a second particular one of the plurality of stateful firewall instances assigned to a cross-zone pair, the cross-zone pair comprising the source zone and a destination zone associated with the destination of the network traffic.