Enabling a service provider to provide intranet services

Abstract

A method and system allows a service provider to provide Intranet services remotely by assigning private virtual servers to customers. Each customer addresses transmissions to one or more private virtual servers using private addresses from the customer's private Intranet. The addresses of different private virtual servers do not have to be unique and may overlap. Customers exchange privately-addressed transmissions with the service provider using tunnels to traverse the local or regional network connecting the customer with the service provider. The service provider routes the transmissions to the relevant private virtual server belonging to the customer that sent the transmission. The service provider also routes privately-addressed transmissions back to individual customers using tunnels.

1. In a system comprising a host computer containing a plurality of virtual servers which support a private network address space wherein the private network address spaces of two or more of the virtual servers overlap, a method for providing private network services using private addresses in a location remote from private network users, the method comprising:
 storing a customer lookup table, the customer lookup table storing associations between physical interfaces and tunnel identifiers identifying tunnels for private networks and a plurality of customer forwarding tables; 
 storing a plurality of customer forwarding tables, the customer forwarding tables associating network addresses with physical interfaces and tunnel identifiers; 
 receiving, over a tunnel, a transmission on a physical interface, the transmission containing a tunnel identifier; 
 determining the correct customer forwarding table from the customer lookup table using the physical interface and the tunnel identifier; 
 determining via the customer forwarding table a physical interface and tunnel identifier associated with a network address of the transmission; and 
 sending the transmission to the network address on the determined physical interface using the determined tunnel identifier. 
 
     
     
       2. A computer-readable medium containing a computer program product for providing private network services using private addresses in a location remote from private network users, wherein a host computer contain a plurality of virtual servers which support a private network address space and wherein the private network address spaces of two or more of the virtual servers overlap, the computer program product, when executed by a computing system, implements a process comprising:
 program instructions for storing a customer lookup table, the customer lookup table storing associations between physical interfaces and tunnel identifiers identifying tunnels for private networks and a plurality of customer forwarding tables; 
 program instructions for storing a plurality of customer forwarding tables, the customer forwarding tables associating network addresses with physical interfaces and tunnel identifiers; 
 program instructions for receiving, over a tunnel, a transmission on a physical interface, the transmission containing a tunnel identifier; 
 program instructions for determining the correct customer forwarding table from the customer lookup table using the physical interface and the tunnel identifier; 
 program instructions for determining via the customer forwarding table a physical interface and tunnel identifier associated with a network address of the transmission; and 
 program instructions for sending the transmission to the network address on the determined physical interface using the determined tunnel identifier. 
 
     
     
       3. In a system comprising a host computer containing multiple virtual servers that each support a private network address space wherein the private network address spaces of two or more of the virtual servers overlap, a method for providing private network services using private addresses in a location remote from private network users, the method comprising:
 storing customer lookup information and customer forwarding information, the customer lookup information specifying associations between physical interfaces and tunnel identifiers identifying tunnels for private networks and multiple customer forwarding tables, the customer forwarding information associating network addresses with physical interfaces and tunnel identifiers;   receiving, over a tunnel, a transmission on a physical interface having an interface identifier, the transmission identifying a tunnel identifier;   determining the correct customer forwarding information from the customer lookup information using the physical interface identifier and the tunnel identifier;   using the customer forwarding information to identify a physical interface and tunnel identifier associated with a network address of the transmission; and   sending the transmission to the network address on the identified physical interface using the identified tunnel identifier.   
     
     
       4. The method of claim 3, further comprising receiving the transmission via the tunnel from a private network. 
     
     
       5. The method of claim 3, further comprising routing the transmission over a layer 2 tunnel. 
     
     
       6. The method of claim 3, wherein routing the transmission to a virtual server comprises:
 terminating an incoming tunnel containing a transmission; and   multiplexing the transmission to a virtual server.   
     
     
       7. The method of claim 6, further comprising:
 identifying the tunnel identifier contained in the transmission; and   selecting a virtual server based upon the identified tunnel identifier.   
     
     
       8. The method of claim 6, wherein routing the transmission to a virtual server comprises:
 terminating an incoming tunnel containing the transmission;   switching the transmission to a tunnel connected to a physical host computer containing a private network's virtual server;   terminating the tunnel at the physical host computer; and   multiplexing the transmission to the virtual server.