Network flow management for isolated virtual networks

    公开(公告)号:US11606300B2

    公开(公告)日:2023-03-14

    申请号:US16844911

    申请日:2020-04-09

    Abstract: A network address assigned to a virtual network interface of a packet transformation node of a flow management service is identified. A packet of a particular network flow associated with an application implemented at an isolated virtual network is sent to the network address. Using a rewrite directive generated at a rewriting decisions node of the service and cached at the packet transformation node, a transformed packet corresponding to a packet received at the packet transformation node is generated and transmitted to a destination.

    Managing failover region availability for implementing a failover service

    公开(公告)号:US11411808B2

    公开(公告)日:2022-08-09

    申请号:US16833347

    申请日:2020-03-27

    Abstract: The present disclosure generally relates to managing a failover service for regions in an active-active configuration. The failover service can receive a list of regions and a list of rules that must be satisfied for a region to be considered available for failover. For each primary region of a plurality of primary regions, the failover service can then determine the regions that satisfy each rule of the list of rules and are available for failover. The failover service can then deliver this information to a client. The failover service can determine the regions that do not satisfy one or more of the rules from the list of rules and deliver this information to a client. The failover service can perform automatic remediation and client remediation to the unavailable failover regions.

    Systems and methods for enabling a highly available managed failover service

    公开(公告)号:US11366728B2

    公开(公告)日:2022-06-21

    申请号:US16698811

    申请日:2019-11-27

    Abstract: The first computing system may interface with an operator of the application and a plurality of hosts of the application distributed between different partitions. The second and third computing systems may host first and second portion of the application in first and second partitions, respectively. The second and third computing systems may poll the first computing system to identify first and second value, respectively, representing state conditions of the first and second partitions, respectively, wherein the first and second partition state conditions are the active state, the passive state, and the fenced state. The second and third computing systems may receive responses from the first computing system comprising the first and second values, respectively, and based on the respective values, initiate a transition to the corresponding partition state condition. The first computing system may assign one of the first and second values to indicate which is the active state.

    Managing request routing information utilizing client identifiers

    公开(公告)号:US11108729B2

    公开(公告)日:2021-08-31

    申请号:US15604451

    申请日:2017-05-24

    Abstract: Systems and methods for managing requesting routing functionality associated with resource requests for one or more resources associated with a content provider are provided. The request routing functionality can correspond to the processing of domain name service (“DNS”) requests for resources by computing devices and the resolution of the DNS requests by the identification of a network address of a computing device that will provide the requested resources. Based on the processing of DNS queries initiated by a client computing device, a CDN service provider can correlate client computing device identifiers, such as an Internet Protocol (“IP”) address, with identifiers (e.g., IP addresses) associated with other components in a content delivery environment, such as DNS resolvers associated with the client computing device.

    SYSTEMS AND METHODS FOR ENABLING A HIGHLY AVAILABLE MANAGED FAILOVER SERVICE

    公开(公告)号:US20210157692A1

    公开(公告)日:2021-05-27

    申请号:US16698811

    申请日:2019-11-27

    Abstract: The first computing system may interface with an operator of the application and a plurality of hosts of the application distributed between different partitions. The second and third computing systems may host first and second portion of the application in first and second partitions, respectively. The second and third computing systems may poll the first computing system to identify first and second value, respectively, representing state conditions of the first and second partitions, respectively, wherein the first and second partition state conditions are the active state, the passive state, and the fenced state. The second and third computing systems may receive responses from the first computing system comprising the first and second values, respectively, and based on the respective values, initiate a transition to the corresponding partition state condition. The first computing system may assign one of the first and second values to indicate which is the active state.

    Load balancing with handshake offload

    公开(公告)号:US10122689B2

    公开(公告)日:2018-11-06

    申请号:US14741386

    申请日:2015-06-16

    Abstract: Cryptographically protected communications sessions are established using a distributed process. A load balancer proxies handshake messages to a first computer system that negotiates a cryptographically protected communications session with the client. When the client and first computer system complete negotiation of the session, the first computer system provides a set of session keys to a second computer system, through the load balancer or another channel. The second computer system then uses the session keys to communicate with the client over the cryptographically protected communications session.

    Metadata synchronization in flow management systems

    公开(公告)号:US09934273B1

    公开(公告)日:2018-04-03

    申请号:US14736167

    申请日:2015-06-10

    CPC classification number: G06F17/30448 G06F17/30598 G06F17/30997 H04L45/74

    Abstract: An iteratively updated metadata collection is used for making packet rewriting decisions at a flow management system. In a particular iteration at a particular rewriting decisions node of the system, metadata representing older local decisions is discarded, and metadata representing notifications of older rewriting decisions which were received at a different tier is also discarded. Representations of more recent local decisions and more recent notifications received at the different tier are added to the metadata collection during the particular iteration. New rewriting decisions are made using aggregations of the objects in the metadata collection.

    Network packet prioritization
    50.
    发明授权

    公开(公告)号:US09749355B1

    公开(公告)日:2017-08-29

    申请号:US14668432

    申请日:2015-03-25

    CPC classification number: H04L63/1458 H04L63/1441

    Abstract: A technology is described for prioritizing network packets using suspicion weights assigned to packet attributes of the network packets. An example method may include analyzing a network packet for packet attributes that have values indicating that the network packet may be associated with a potential network attack. Suspicion weights for the packet attributes identified as having a value that indicates that the network packet is associated with the potential network attack may be obtained, and a suspicion score may be calculated for the network packet using the suspicion weights.

Patent Agency Ranking