Abstract: A secure private network connectivity system (SNCS) within a cloud service provider infrastructure (CSPI) is described that provides secure private network connectivity between external resources residing in a customer's on-premise environment and the customer's resources residing in the cloud. The SNCS provides secure private bi-directional network connectivity between external resources residing in a customer's external site representation and resources and services residing in the customer's VCN in the cloud without a user (e.g., an administrator) of the enterprise having to explicitly configure the external resources, advertise routes or set up site-to-site network connectivity.

Abstract: Techniques for performing NAT operations to send packets between networks are described. In an example, a network device receives a packet that comprises a header. The header indicates a source address of a first computing resource in a first network and a destination address of a second computing resource in a second network. The network device determines a pool of identifiers allocated for the first network and the second computing resource and identifies a packet flow based on the header. The network device also determines that no identifier from the pool of identifiers has been allocated for the packet flow and determines an identifier available to allocate for the packet flow from the pool of identifiers. The network device performs a NAT operation on the packet based on the identifier.

Abstract: In general, techniques are described for managing distributed address pools within network devices. A network device that includes a control unit and at least one interface may implement these techniques. The control unit stores data defining a network address pool shared by both the network device and another network device. The control unit includes a shared pool manager module that evaluates the data defining the network address pool to determine a block of addresses of the network address pool that is not in use by the other network device. The at least one interface transmits a request to the other network device requesting the determined block and receives a response from the other network device indicating whether one or more addresses of the requested block are available. The control unit then allocates one or more addresses from the requested block to subscriber devices based on the indication in the response.

Abstract: In general, techniques are described for managing distributed address pools within network devices. A network device that includes a control unit and at least one interface may implement these techniques. The control unit stores data defining a network address pool shared by both the network device and another network device. The control unit includes a shared pool manager module that evaluates the data defining the network address pool to determine a block of addresses of the network address pool that is not in use by the other network device. The at least one interface transmits a request to the other network device requesting the determined block and receives a response from the other network device indicating whether one or more addresses of the requested block are available. The control unit then allocates one or more addresses from the requested block to subscriber devices based on the indication in the response.