Abstract: A network orchestrator capable of selecting a primary virtual internet gateway (VIG) is provided. During operation, the network orchestrator can monitor roundtrip times for multiple packets between a primary VIG and a branch gateway, and between a secondary VIG and the branch gateway. The network orchestrator can determine a first forecast roundtrip time associated with the connection between the primary VIG and branch gateway, and a second forecast roundtrip time associated with the connection between the secondary VIG and the branch gateway. The network orchestrator can then select a new primary VIG based on the first and second forecast roundtrip times.

Abstract: A network orchestrator may receive from a branch gateway (BG) an indication that the BG has joined a wide area network (WAN). The network orchestrator may assign, based in part on first load information of a first virtual internet gateway (VIG) and second load information of a second VIG, the first VIG as a primary VIG for the BG. The network orchestrator may also transmit a first redistribution cost to the first VIG. The network orchestrator may also transmit a second redistribution cost that is greater than the first redistribution cost to the second VIG.

Abstract: A method including selecting, with a network orchestrator, a first virtual internet gateway (VIG) as a primary VIG for a branch gateway, is provided. The method includes selecting a second VIG as a secondary VIG for the branch gateway. The method includes monitoring roundtrip times for multiple packets between the primary VIG and the branch gateway, and between the secondary VIG and the branch gateway, and determining a first forecast roundtrip time associated with the connection between the primary VIG and branch gateway, as well as determining a second forecast roundtrip time associated with the connection between the secondary VIG and the branch gateway. The method includes selecting a new primary VIG based on the first forecast roundtrip time and the second forecast roundtrip time, and further based on a skew of active branches between the primary VIG and the secondary VIG.

Abstract: A network orchestrator may receive from a branch gateway (BG) an indication that the BG has joined a wide area network (WAN). The network orchestrator may assign, based in part on first load information of a first virtual internet gateway (VIG) and second load information of a second VIG, the first VIG as a primary VIG for the BG. The network orchestrator may also transmit a first redistribution cost to the first VIG. The network orchestrator may also transmit a second redistribution cost that is greater than the first redistribution cost to the second VIG.