Patent ID: 8296839

Claim:
A method for enabling routing among a plurality of protected enclaves, wherein each of the protected enclaves includes one or more plain text (PT) networks and is supported by one or more Virtual Private Network (VPN) gateways of a plurality of VPN gateways, the method comprising: registering a VPN gateway with one or more prefix discovery servers, wherein registering said VPN gateway comprises registering, with said one or more prefix discovery servers, network prefixes within said protected enclaves reachable by said VPN gateway; receiving from said one or more prefix discovery servers, at said VPN gateway, registered network prefixes within said protected enclaves, including receiving mappings, generated by said one or more prefix discovery servers, between said registered network prefixes and VPN gateways enabled to reach said registered network prefixes. wherein the mappings have associated metrics for using said VPN gateways to reach said registered network prefixes; distributing said mappings and associated metrics to said protected enclaves reachable by said VPN gateway; and determining, using said received mappings and associated metrics, routing paths between said protected enclaves reachable by said VPN gateway and other protected enclaves of said plurality of protected enclaves.