Abstract: In one embodiment, a method comprises detecting an initiation of a movement process of a virtual machine executed by a first physical host to a destination physical host; initiating a transfer of a stateful process executed by a first network entity and providing enhanced network services for the virtual machine executed in the first physical host, including causing execution parameters for the enhanced network services to be sent to a second network entity; and completing the movement process of the virtual machine to the destination physical host in response to detecting the stateful process is executing in the second network entity and is ready to provide the enhanced network services for execution of the virtual machine in the destination physical host.

Abstract: In one embodiment, a method comprises detecting an initiation of a movement process of a virtual machine executed by a first physical host to a destination physical host; initiating a transfer of a stateful process executed by a first network entity and providing enhanced network services for the virtual machine executed in the first physical host, including causing execution parameters for the enhanced network services to be sent to a second network entity; and completing the movement process of the virtual machine to the destination physical host in response to detecting the stateful process is executing in the second network entity and is ready to provide the enhanced network services for execution of the virtual machine in the destination physical host.

Abstract: In one embodiment, a secure communication tunnel is established between a first VPN gateway and a remote access client. The remote access client requests a resource of an enterprise network. The first VPN gateway selects a second VPN gateway based at least on a cost of communication between the requested resource and the second VPN gateway. An indication of the second VPN gateway is sent to the remote access client. The first VPN gateway maintains the first secure communication tunnel while the remote access client accesses the resource through a second secure communication tunnel established between the remote access client and the second VPN gateway.