公开(公告)号：US10911528B2

公开(公告)日：2021-02-02

申请号：US16825871

申请日：2020-03-20

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Kevin Christopher Miller ,  Andrew J. Doane

IPC: G06F15/173 ,  H04L29/08 ,  G06F9/455 ,  G06F11/14 ,  G06F11/20 ,  H04L29/12

Abstract: Techniques are described for providing managed computer networks, such as for managed virtual computer networks overlaid on one or more other underlying computer networks. In some situations, the techniques include facilitating replication of a primary computing node that is actively participating in a managed computer network, such as by maintaining one or more other computing nodes in the managed computer network as replicas, and using such replica computing nodes in various manners. For example, a particular managed virtual computer network may span multiple broadcast domains of an underlying computer network, and a particular primary computing node and a corresponding remote replica computing node of the managed virtual computer network may be implemented in distinct broadcast domains of the underlying computer network, with the replica computing node being used to transparently replace the primary computing node in the virtual computer network if the primary computing node becomes unavailable.

公开(公告)号：US20200259707A1

公开(公告)日：2020-08-13

申请号：US16864019

申请日：2020-04-30

Applicant: Amazon Technologies, Inc.

Inventor： Daniel T. Cohn ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: H04L12/24 ,  G06F9/50 ,  H04L12/701 ,  H04L12/46 ,  H04L12/751 ,  H04L29/08 ,  G06F9/455

Abstract: Techniques are described for providing logical networking functionality for managed computer networks, such as for virtual computer networks provided on behalf of users or other entities. In some situations, a user may configure or otherwise specify a network topology for a virtual computer network, such as a logical network topology that separates multiple computing nodes of the virtual computer network into multiple logical sub-networks and/or that specifies one or more logical networking devices for the virtual computer network. After a network topology is specified for a virtual computer network, logical networking functionality corresponding to the network topology may be provided in various manners, such as without physically implementing the network topology for the virtual computer network. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

公开(公告)号：US20200220923A1

公开(公告)日：2020-07-09

申请号：US16825871

申请日：2020-03-20

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Kevin Christopher Miller ,  Andrew J. Doane

IPC: H04L29/08 ,  G06F11/14 ,  G06F9/455 ,  H04L29/12 ,  G06F11/20

Abstract: Techniques are described for providing managed computer networks, such as for managed virtual computer networks overlaid on one or more other underlying computer networks. In some situations, the techniques include facilitating replication of a primary computing node that is actively participating in a managed computer network, such as by maintaining one or more other computing nodes in the managed computer network as replicas, and using such replica computing nodes in various manners. For example, a particular managed virtual computer network may span multiple broadcast domains of an underlying computer network, and a particular primary computing node and a corresponding remote replica computing node of the managed virtual computer network may be implemented in distinct broadcast domains of the underlying computer network, with the replica computing node being used to transparently replace the primary computing node in the virtual computer network if the primary computing node becomes unavailable.

公开(公告)号：US10574534B2

公开(公告)日：2020-02-25

申请号：US15996371

申请日：2018-06-01

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Kevin Christopher Miller ,  Andrew J. Doane

IPC: H04L12/28 ,  H04L12/24 ,  H04L12/715 ,  H04L12/713 ,  G06F9/455 ,  H04L29/08 ,  H04L12/751 ,  H04J1/16

Abstract: Techniques are described for providing virtual networking functionality for managed computer networks. In some situations, a user may configure or otherwise specify a logical network topology for a managed computer network with multiple computing nodes that includes one or more virtual networking devices each associated with a specified group of the multiple computing nodes. Corresponding networking functionality may be provided for communications between the multiple computing nodes by emulating functionality that would be provided by the networking devices if they were physically present and configured to support the specified network topology. In some situations, the managed computer network is a virtual computer network overlaid on a substrate network, and the networking device functionality emulating includes receiving routing communications directed to the networking devices and using included routing information to update the specified network topology for the managed computer network.

公开(公告)号：US10419287B2

公开(公告)日：2019-09-17

申请号：US15663592

申请日：2017-07-28

Applicant: Amazon Technologies, Inc.

Inventor： Kevin Christopher Miller ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: H04L12/24 ,  H04L12/713 ,  H04L12/715 ,  H04L12/751

Abstract: Techniques are described for providing managed virtual computer networks that have a configured logical network topology with virtual networking devices, such as by a network-accessible configurable network service, with corresponding networking functionality provided for communications between multiple computing nodes of the virtual computer network by emulating functionality that would be provided by the virtual networking devices if they were physically present. In some situations, the networking functionality provided for a managed computer network of a client includes receiving routing communications directed to the virtual networking devices and using included routing information to update the configuration of the managed computer network, such as to allow at least some computing nodes of a managed computer network to dynamically signal particular types of uses of one or more indicated target network addresses and/or to dynamically signal use of particular external public network addresses based on such routing information.

公开(公告)号：US10223538B1

公开(公告)日：2019-03-05

申请号：US14078336

申请日：2013-11-12

Applicant: Amazon Technologies, Inc.

Inventor： Todd Lawrence Cignetti ,  Robert Eric Fitzgerald ,  Andrew J. Doane ,  Eric Jason Brandwine

IPC: G06F21/60 ,  G06F9/455 ,  G06F21/62

Abstract: Organizations maintain and generate large amounts of sensitive information using computer hardware resources and services of a service provider. Furthermore, there is a need to be able to delete large amounts of data securely and quickly by encrypting the data with a key and destroying the key. To ensure that information stored remotely is secure and capable of secure deletion, cryptographic keys used by the organization should be prevented from being persistently stored during serialization operations. A variety of methods may be used to protect access to keying material and prevent the keying material from being stored persistently.

公开(公告)号：US20170295060A1

公开(公告)日：2017-10-12

申请号：US15627067

申请日：2017-06-19

Applicant: Amazon Technologies, Inc.

Inventor： Daniel T. Cohn ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: H04L12/24 ,  H04L29/08

CPC classification number: H04L41/0816 ,  H04L41/08 ,  H04L41/0806 ,  H04L61/103 ,  H04L61/2007 ,  H04L61/251 ,  H04L61/6004 ,  H04L61/6059 ,  H04L63/0272 ,  H04L67/10 ,  H04L67/16

Abstract: Techniques are described for managing communications between multiple computing nodes, such as for computing nodes that are part of managed virtual computer networks provided on behalf of users or other entities. In some situations, one or more of the computing nodes of a managed virtual computer network is configured to perform actions to extend capabilities of the managed virtual computer network to other computing nodes that are not part of the managed virtual computer network, such as by forwarding communications between computing nodes of the managed virtual computer network and the other external computing nodes so as to enable the other external computing nodes to participate in the managed virtual computer network. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

公开(公告)号：US09680808B2

公开(公告)日：2017-06-13

申请号：US14992980

申请日：2016-01-11

Applicant: Amazon Technologies, Inc.

Inventor： Todd Lawrence Cignetti ,  Eric Jason Brandwine ,  Robert Eric Fitzgerald ,  Andrew J. Doane

IPC: H04L29/06 ,  G06F21/60 ,  G06F9/455 ,  G06F9/48 ,  G06F21/62

CPC classification number: H04L63/061 ,  G06F9/45558 ,  G06F9/4812 ,  G06F21/602 ,  G06F21/6218 ,  G06F2221/2101 ,  G06F2221/2143

Abstract: Organizations maintain and generate large amounts of sensitive information using computer hardware resources and services of a service provider. Furthermore, there is a need to be able to delete large amounts of data securely and quickly by encrypting the data with a key and destroying the key. To ensure that information stored remotely is secured and capable of secure deletion, cryptographic keys used by the organization should be prevented from being persistently stored during serialization operations. Signaling methods are used to notify virtual machine instances of serialization events in order to prevent keying material from being stored persistently.

公开(公告)号：US20170099260A1

公开(公告)日：2017-04-06

申请号：US15382403

申请日：2016-12-16

Applicant: Amazon Technologies, Inc.

Inventor： Daniel Todd Cohn ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: H04L29/06 ,  H04L12/46 ,  H04L29/12 ,  H04L12/24

CPC classification number: H04L63/0272 ,  G06F9/30098 ,  G06F9/384 ,  G06F9/3842 ,  G06F9/3863 ,  G06F9/3885 ,  G06F9/45533 ,  H04L12/4633 ,  H04L12/4641 ,  H04L12/4675 ,  H04L41/0886 ,  H04L61/2076

Abstract: Techniques are described for providing users with access to computer networks, such as to enable users to create and configure computer networks that are provided by a remote configurable network service for the users' use. Computer networks provided by the configurable network service may be configured to be private computer networks that are accessible only by the users who create them, and may each be created and configured by a client of the configurable network service to be an extension to an existing computer network of the client, such as a private computer network extension to an existing private computer network of the client. In addition, access to remote resource services may be configured and provided from such computer networks in various manners, such as to automatically include access control information to limit access to particular resources to computing nodes at the location of that provided computer network.

公开(公告)号：US09374341B2

公开(公告)日：2016-06-21

申请号：US14479124

申请日：2014-09-05

Applicant: Amazon Technologies, Inc.

Inventor： Andrew J. Doane ,  Eric Jason Brandwine

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/0272 ,  H04L61/2069 ,  H04L63/10 ,  H04L67/18 ,  H04L67/34 ,  H04L67/36

Abstract: Techniques are described for providing users with access to computer networks, such as to enable users to interact with a remote configurable network service to create and configure computer networks that are provided by the configurable network service for use by the users. Secure private access between a computer network provided for a user by the configurable network service and one or more other remote computing systems of the user (e.g., a remote private network) may be enabled in various ways. For example, a user may programmatically invoke an API provided by the configurable network service to obtain assistance in establishing remote access from a remote location to a provided computer network of the configurable network service, such as to establish a VPN connection from the remote location to the provided computer network using hardware and/or software supplied to the remote location in response to the API invocation.

Abstract translation: 描述了用于向用户提供对计算机网络的访问的技术，例如使得用户能够与远程可配置网络服务交互以创建和配置由可配置网络服务提供以供用户使用的计算机网络。 通过可配置网络服务为用户提供的计算机网络与用户的一个或多个其他远程计算系统（例如，远程专用网络）之间的安全私人访问可以以各种方式启用。 例如，用户可以以编程方式调用可配置网络服务提供的API，以获得建立从远程位置到所提供的可配置网络服务的计算机网络的远程访问的帮助，例如建立从远程位置到 提供的计算机网络使用响应于API调用提供给远程位置的硬件和/或软件。