-
公开(公告)号:US11606300B2
公开(公告)日:2023-03-14
申请号:US16844911
申请日:2020-04-09
Applicant: Amazon Technologies, Inc.
Inventor: Colm MacCarthaigh
IPC: G06F15/173 , H04L47/19
Abstract: A network address assigned to a virtual network interface of a packet transformation node of a flow management service is identified. A packet of a particular network flow associated with an application implemented at an isolated virtual network is sent to the network address. Using a rewrite directive generated at a rewriting decisions node of the service and cached at the packet transformation node, a transformed packet corresponding to a packet received at the packet transformation node is generated and transmitted to a destination.
-
公开(公告)号:US11411808B2
公开(公告)日:2022-08-09
申请号:US16833347
申请日:2020-03-27
Applicant: Amazon Technologies, Inc.
Inventor: Colm MacCarthaigh , Nathan Dye
IPC: H04L41/0668 , H04L67/10 , G06F11/20
Abstract: The present disclosure generally relates to managing a failover service for regions in an active-active configuration. The failover service can receive a list of regions and a list of rules that must be satisfied for a region to be considered available for failover. For each primary region of a plurality of primary regions, the failover service can then determine the regions that satisfy each rule of the list of rules and are available for failover. The failover service can then deliver this information to a client. The failover service can determine the regions that do not satisfy one or more of the rules from the list of rules and deliver this information to a client. The failover service can perform automatic remediation and client remediation to the unavailable failover regions.
-
公开(公告)号:US11366728B2
公开(公告)日:2022-06-21
申请号:US16698811
申请日:2019-11-27
Applicant: Amazon Technologies, Inc.
Inventor: Colm MacCarthaigh , Grant A. McAlister
Abstract: The first computing system may interface with an operator of the application and a plurality of hosts of the application distributed between different partitions. The second and third computing systems may host first and second portion of the application in first and second partitions, respectively. The second and third computing systems may poll the first computing system to identify first and second value, respectively, representing state conditions of the first and second partitions, respectively, wherein the first and second partition state conditions are the active state, the passive state, and the fenced state. The second and third computing systems may receive responses from the first computing system comprising the first and second values, respectively, and based on the respective values, initiate a transition to the corresponding partition state condition. The first computing system may assign one of the first and second values to indicate which is the active state.
-
公开(公告)号:US11108729B2
公开(公告)日:2021-08-31
申请号:US15604451
申请日:2017-05-24
Applicant: Amazon Technologies, Inc.
Inventor: David R. Richardson , John Cormie , Colm MacCarthaigh , Benjamin W. S. Redman
Abstract: Systems and methods for managing requesting routing functionality associated with resource requests for one or more resources associated with a content provider are provided. The request routing functionality can correspond to the processing of domain name service (“DNS”) requests for resources by computing devices and the resolution of the DNS requests by the identification of a network address of a computing device that will provide the requested resources. Based on the processing of DNS queries initiated by a client computing device, a CDN service provider can correlate client computing device identifiers, such as an Internet Protocol (“IP”) address, with identifiers (e.g., IP addresses) associated with other components in a content delivery environment, such as DNS resolvers associated with the client computing device.
-
公开(公告)号:US20210157692A1
公开(公告)日:2021-05-27
申请号:US16698811
申请日:2019-11-27
Applicant: Amazon Technologies, Inc.
Inventor: Colm MacCarthaigh , Grant A. McAlister
Abstract: The first computing system may interface with an operator of the application and a plurality of hosts of the application distributed between different partitions. The second and third computing systems may host first and second portion of the application in first and second partitions, respectively. The second and third computing systems may poll the first computing system to identify first and second value, respectively, representing state conditions of the first and second partitions, respectively, wherein the first and second partition state conditions are the active state, the passive state, and the fenced state. The second and third computing systems may receive responses from the first computing system comprising the first and second values, respectively, and based on the respective values, initiate a transition to the corresponding partition state condition. The first computing system may assign one of the first and second values to indicate which is the active state.
-
公开(公告)号:US20200252477A1
公开(公告)日:2020-08-06
申请号:US16853224
申请日:2020-04-20
Applicant: Amazon Technologies, Inc.
Inventor: Prashanth A. Acharya , Jonathan B. Corley , Craig W. Howard , Harvo R. Jones , John K. Loendorf , Colm MacCarthaigh , Bradley E. Marshall , Imran Patel , Lee B. Rosen , Ronald James Snyder, Jr. , Ryan F. Watson
IPC: H04L29/08 , G06F16/957 , H04L29/06
Abstract: Techniques are described for managing preloading of data for client computing systems. A client computing system may provide one or more persistent data storage caches on local storage, such as to support a particular software program executing on the client computing system (e.g., a Web browser program, with the persistent data storage cache designed to store browser cookies and other data for later access by the Web browser program). Additional data may be stored in such a persistent data storage cache by preloading those data groups before they are requested by the client computing system (e.g., based on interactions of a user of the client computing system with an executing program on the client computing system). Particular data groups to preload may be selected in various manners, including to provide a specified type of minimum functionality to a client computing system based on the preloaded data groups.
-
公开(公告)号:US10122689B2
公开(公告)日:2018-11-06
申请号:US14741386
申请日:2015-06-16
Applicant: Amazon Technologies, Inc.
Inventor: Colm MacCarthaigh
IPC: H04L29/06
Abstract: Cryptographically protected communications sessions are established using a distributed process. A load balancer proxies handshake messages to a first computer system that negotiates a cryptographically protected communications session with the client. When the client and first computer system complete negotiation of the session, the first computer system provides a set of session keys to a second computer system, through the load balancer or another channel. The second computer system then uses the session keys to communicate with the client over the cryptographically protected communications session.
-
公开(公告)号:US09934273B1
公开(公告)日:2018-04-03
申请号:US14736167
申请日:2015-06-10
Applicant: Amazon Technologies, Inc.
Inventor: Colm MacCarthaigh
IPC: G06F17/30 , H04L12/741
CPC classification number: G06F17/30448 , G06F17/30598 , G06F17/30997 , H04L45/74
Abstract: An iteratively updated metadata collection is used for making packet rewriting decisions at a flow management system. In a particular iteration at a particular rewriting decisions node of the system, metadata representing older local decisions is discarded, and metadata representing notifications of older rewriting decisions which were received at a different tier is also discarded. Representations of more recent local decisions and more recent notifications received at the different tier are added to the metadata collection during the particular iteration. New rewriting decisions are made using aggregations of the objects in the metadata collection.
-
公开(公告)号:US09912740B2
公开(公告)日:2018-03-06
申请号:US15191240
申请日:2016-06-23
Applicant: Amazon Technologies, Inc.
Inventor: David R. Richardson , John Cormie , Colm MacCarthaigh , Benjamin W. S. Redman
CPC classification number: H04L67/1004 , G06F15/16 , H04L43/0858 , H04L61/1511 , H04L65/4084 , H04L67/02 , H04L67/10 , H04L67/2842 , H04L67/34 , H04L67/42
Abstract: Systems and method for the management and processing of resource requests by a service provider, such as a content delivery network (“CDN”) service provider, on behalf of a content provider are provided. The CDN service provider can measure the performance associated with the delivery of resources to a requesting client computing devices from various computing devices associated with the CDN service provider. In one embodiment, a client computing device can execute code, such as scripts, that cause the client computing device to transmit requests to different computing devices associated with the CDN service provider's domain. Information associated with the processing of the responses can be used to measure CDN service provider latencies.
-
公开(公告)号:US09749355B1
公开(公告)日:2017-08-29
申请号:US14668432
申请日:2015-03-25
Applicant: Amazon Technologies, Inc.
Inventor: Bryan Mark Benson , Michael F. Diggins , David Dongyi Lu , Xingbo Wang , Colm MacCarthaigh , Anshul Saxena
IPC: H04L29/06
CPC classification number: H04L63/1458 , H04L63/1441
Abstract: A technology is described for prioritizing network packets using suspicion weights assigned to packet attributes of the network packets. An example method may include analyzing a network packet for packet attributes that have values indicating that the network packet may be associated with a potential network attack. Suspicion weights for the packet attributes identified as having a value that indicates that the network packet is associated with the potential network attack may be obtained, and a suspicion score may be calculated for the network packet using the suspicion weights.
-
-
-
-
-
-
-
-
-