Patent ID: 8688994

Claim:
One or more computer-readable media devices having computer-executable instructions embodied thereon that, when executed, perform a method for allowing a first overlay governed by a first authority domain to negotiate with a second overlay governed by second authority domain in order to avoid addressing ambiguity, the method comprising: providing the first overlay that includes members assigned virtual IP addresses from a first address range, wherein a first federation mechanism is associated with the first authority domain and is provisioned to negotiate on behalf of the first overlay; providing the second overlay that includes members assigned virtual IP addresses from a second address range, wherein a second federation mechanism is associated with the second authority domain and is provisioned to negotiate on behalf of the second overlay; and invoking a negotiation between the first federation mechanism and the second federation mechanism, wherein the negotiation includes an address-resolution process comprising: (a) determining a version of internet protocol (IP) to employ when routing communications between the first overlay and the second overlay; (b) when it is determined to employ IP version 6 (IPv6) addressing, establishing a communication link that is absent a translation mechanism; (c) when it is determined to employ IP version 4 (IPv4) addressing, determining whether a portion of the first address range and a portion of the second address range overlap; (d) when it is determined that no overlap exists between the first address range and the second address range, establishing the communication link that is absent the translation mechanism; (e) when it is determined that the first address range and the second address range overlap, establishing a network address translation (NAT) link that attempts to resolve IPv4 address conflicts between the first overlay and the second overlay; and wherein establishing the network address translation link comprises: establishing a communication link between the first overlay and the second overlay; injecting a translation device into the communication link that functions as an interface for converting overlapping IP addresses; and sending a request from the first federation mechanism to the second federation mechanism, wherein the request conveys a proposed policy; and receiving a response from the second federation mechanism, wherein the received response includes addendums to the proposed policy; and delegating authority over the communication link from the second federation mechanism to the first federation mechanism.