PRIVATE NETWORK PEERING IN VIRTUAL NETWORK ENVIRONMENTS

    公开(公告)号:US20210160218A1

    公开(公告)日:2021-05-27

    申请号:US17145130

    申请日:2021-01-08

    Abstract: Methods and apparatus for private network peering in virtual network environments in which peerings between virtual client private networks on a provider network may be established by clients via an API to a peering service. The peering service and API 104 may allow clients to dynamically establish and manage virtual network transit centers on the provider network at which virtual ports may be established and configured, virtual peerings between private networks may be requested and, if accepted, established, and routing information for the peerings may be specified and exchanged. Once a virtual peering between client private networks is established, packets may be exchanged between the respective client private networks via the peering over the network substrate according to the overlay network technology used by the provider network, for example an encapsulation protocol technology.

    Flow policies for virtual networks in provider network environments

    公开(公告)号:US10862796B1

    公开(公告)日:2020-12-08

    申请号:US15409485

    申请日:2017-01-18

    Abstract: A flow policy service that allows clients to define policies for packet flows to, from, and within their virtual networks on a provider network. Via the service, a client may define rules that specify appliances that inbound, outbound, and/or internal virtual network traffic should flow through. The rules may, for example, be attached to the virtual network, to subnets within the virtual network, and/or to resource instances within the virtual network. The rules may be specified in a descriptive, domain-specific language. The service determines how and where on the provider network to implement the rules in order to apply the specified policy. Thus, the actual implementation of the policy may be hidden from the client. The service may generate flow reports that may be used to confirm that traffic to, from, or within a virtual network is flowing through the correct network appliances according to the policy.

    Associating route tables with ingress traffic to logically isolated networks

    公开(公告)号:US10833992B1

    公开(公告)日:2020-11-10

    申请号:US16220703

    申请日:2018-12-14

    Abstract: Route tables may be associated with ingress traffic for logically isolated networks. A routing device at the edge of a logically isolated network may receive a route to include in a route table that is associated with ingress traffic to the logically isolated network to forward the ingress traffic to a network appliance hosted in the logically isolated network. Network packets received at the edge routing device may have a destination of a computing resource hosted in the logically isolated network. The edge routing device may identify the route in the route table to override the destination in the network packet with the network appliance and forward the network packet to the network appliance according to the route.

    Dynamic traffic regulation
    39.
    发明授权

    公开(公告)号:US09847970B1

    公开(公告)日:2017-12-19

    申请号:US14266619

    申请日:2014-04-30

    CPC classification number: H04L63/1458

    Abstract: Functionality is disclosed herein for regulating bandwidth that is available for network traffic flowing through a data communications network. In response to attack traffic being detected, one or more traffic regulators are set to control an available bandwidth to be used by the attack traffic. The one or more traffic regulators are adjusted until an attack is no longer detected. After the attack ends, the traffic regulator may be disabled or set to a different mode of operation.

Patent Agency Ranking