Providing local secure network access to remote services
    1.
    发明授权
    Providing local secure network access to remote services 有权
    提供本地安全网络访问远程服务

    公开(公告)号:US09137209B1

    公开(公告)日:2015-09-15

    申请号:US12332216

    申请日:2008-12-10

    摘要: Techniques are described for providing users with access to computer networks, such as to enable users to create computer networks that are provided by a remote configurable network service for use by the users. Such provided computer networks may be configured to be private computer networks accessible only by the users who create them, and may each be created and configured by a client of the configurable network service to be an extension to an existing computer network of the client, such as a private computer network extension to an existing private computer network of the client. In addition, access to remote resource services may be configured and provided from such computer networks in various manners, such as to include a local access mechanism as part of a provided computer network that is configured to forward communications sent to the access mechanism to a particular remote resource service.

    摘要翻译: 描述了为用户提供对计算机网络的访问的技术,例如使得用户能够创建由远程可配置网络服务提供以供用户使用的计算机网络。 这样提供的计算机网络可以被配置为仅由创建它们的用户可访问的专用计算机网络,并且每个可以由可配置网络服务的客户端创建和配置为可扩展到客户端的现有计算机网络,例如 作为私人计算机网络扩展到客户端的现有专用计算机网络。 此外,可以以各种方式从这样的计算机网络配置和提供对远程资源服务的访问,例如包括作为所提供的计算机网络的一部分的本地访问机制,其被配置为将发送到访问机制的通信转发到特定的 远程资源服务。

    Transpose boxes for network interconnection
    2.
    发明授权
    Transpose boxes for network interconnection 有权
    用于网络互连的移位盒

    公开(公告)号:US08837517B2

    公开(公告)日:2014-09-16

    申请号:US12888176

    申请日:2010-09-22

    IPC分类号: H04L12/66 G06F15/173

    CPC分类号: G06F15/17356

    摘要: The deployment and scaling of a network of electronic devices can be improved by utilizing one or more network transpose boxes. Each transpose box can include a number of connectors and a meshing useful for implementing a specific network topology. When connecting devices of different tiers in the network, each device need only be connected to at least one of the connectors on the transpose box. The meshing of the transpose box can cause each device to be connected to any or all of the devices in the other tier as dictated by the network topology. When changing network topologies or scaling the network, additional devices can be added to available connectors on an existing transpose box, or new or additional transpose boxes can be deployed in order to handle the change with minimal cabling effort.

    摘要翻译: 可以通过利用一个或多个网络转置盒来改进电子设备网络的部署和缩放。 每个转置盒可以包括多个连接器和用于实现特定网络拓扑的网格。 当连接网络中不同层的设备时,每个设备只需要连接到转置盒上的至少一个连接器。 转置框的网格划分可以使每个设备连接到由网络拓扑所指定的另一层中的任何或所有设备。 当更改网络拓扑或扩展网络时,可以将其他设备添加到现有转置盒上的可用连接器中,也可以部署新的或附加的转置盒,以便以最少的布线工作来处理更改。

    Managing communications having multiple alternative destinations
    3.
    发明授权
    Managing communications having multiple alternative destinations 有权
    管理具有多个替代目的地的通信

    公开(公告)号:US08595378B1

    公开(公告)日:2013-11-26

    申请号:US12414253

    申请日:2009-03-30

    IPC分类号: G06F15/173

    摘要: Techniques are described for managing communications between computing nodes of a computer network. In some situations, multiple computing nodes of a provided computer network may share a single virtual network address, and communications sent to that single virtual network address by other computing nodes may be managed in various manners. For example, the multiple computing nodes sharing the single virtual network address may be part of a pool of alternative destinations associated with the single virtual network address, and particular computing nodes from the pool may be selected to receive particular communications sent to the single virtual network address. Pools of multiple related computing nodes may also be identified and monitored in various manners. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

    摘要翻译: 描述了用于管理计算机网络的计算节点之间的通信的技术。 在一些情况下,所提供的计算机网络的多个计算节点可以共享单个虚拟网络地址,并且可以以各种方式来管理由其他计算节点发送到该单个虚拟网络地址的通信。 例如,共享单个虚拟网络地址的多个计算节点可以是与单个虚拟网络地址相关联的替代目的地池的一部分,并且可以选择来自池的特定计算节点以接收发送到单个虚拟网络的特定通信 地址。 还可以以各种方式识别和监视多个相关计算节点的池。 在一些情况下,计算节点可以包括托管在一个或多个物理计算机或系统上的虚拟机节点,诸如由一个或多个用户代表或代表一个或多个用户。

    Authorizing communications between computing nodes
    4.
    发明授权
    Authorizing communications between computing nodes 有权
    授权计算节点之间的通信

    公开(公告)号:US08429739B2

    公开(公告)日:2013-04-23

    申请号:US12060099

    申请日:2008-03-31

    申请人: Daniel T. Cohn

    发明人: Daniel T. Cohn

    IPC分类号: G06F9/00 G06F15/16 G06F17/00

    摘要: Techniques are described for managing communications between multiple computing nodes, such as computing nodes that are separated by one or more physical networks. In some situations, the techniques may be used to provide a virtual network between multiple computing nodes that are separated by one or more intermediate physical networks, such as from the edge of the one or more intermediate physical networks by modifying communications that enter and/or leave the intermediate physical networks. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users (e.g., users of a program execution service). The managing of the communications may include determining whether communications sent to managed computing nodes are authorized, and providing the communications to the computing nodes only if they are determined to be authorized.

    摘要翻译: 描述了用于管理多个计算节点之间的通信的技术,诸如由一个或多个物理网络分离的计算节点。 在某些情况下,这些技术可用于在由一个或多个中间物理网络分离的多个计算节点之间提供虚拟网络,诸如从一个或多个中间物理网络的边缘通过修改进入和/或 离开中间物理网络。 在一些情况下,计算节点可以包括托管在一个或多个物理计算机或系统上的虚拟机节点,诸如由或由一个或多个用户(例如,程序执行服务的用户)代表。 通信的管理可以包括确定发送到被管理计算节点的通信是否被授权,以及仅当它们被确定被授权时才将该通信提供给计算节点。

    Configuring communications between computing nodes
    5.
    发明授权
    Configuring communications between computing nodes 有权
    配置计算节点之间的通信

    公开(公告)号:US07865586B2

    公开(公告)日:2011-01-04

    申请号:US12060074

    申请日:2008-03-31

    申请人: Daniel T. Cohn

    发明人: Daniel T. Cohn

    IPC分类号: G06F15/173

    摘要: Techniques are described for configuring communications between multiple computing nodes, such as computing nodes that are separated by one or more physical networks. In some situations, the techniques may be used to provide a virtual network between multiple computing nodes that are separated by one or more intermediate physical networks, such as from the edge of the one or more intermediate physical networks by modifying communications that enter and/or leave the intermediate physical networks so as to provide an overlay network without encapsulation of the communications. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users (e.g., users of a program execution service).

    摘要翻译: 描述了用于配置多个计算节点之间的通信的技术,诸如由一个或多个物理网络分离的计算节点。 在某些情况下,这些技术可用于在由一个或多个中间物理网络分离的多个计算节点之间提供虚拟网络,诸如从一个或多个中间物理网络的边缘通过修改进入和/或 离开中间物理网络,以便提供覆盖网络而不封装通信。 在一些情况下,计算节点可以包括托管在一个或多个物理计算机或系统上的虚拟机节点,诸如由或由一个或多个用户(例如,程序执行服务的用户)代表。

    AUTHORIZING COMMUNICATIONS BETWEEN COMPUTING NODES
    6.
    发明申请
    AUTHORIZING COMMUNICATIONS BETWEEN COMPUTING NODES 有权
    授权计算代码之间的通信

    公开(公告)号:US20090249473A1

    公开(公告)日:2009-10-01

    申请号:US12060099

    申请日:2008-03-31

    申请人: Daniel T. Cohn

    发明人: Daniel T. Cohn

    IPC分类号: G06F21/20

    摘要: Techniques are described for managing communications between multiple computing nodes, such as computing nodes that are separated by one or more physical networks. In some situations, the techniques may be used to provide a virtual network between multiple computing nodes that are separated by one or more intermediate physical networks, such as from the edge of the one or more intermediate physical networks by modifying communications that enter and/or leave the intermediate physical networks. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users (e.g., users of a program execution service). The managing of the communications may include determining whether communications sent to managed computing nodes are authorized, and providing the communications to the computing nodes only if they are determined to be authorized.

    摘要翻译: 描述了用于管理多个计算节点之间的通信的技术,诸如由一个或多个物理网络分离的计算节点。 在某些情况下,这些技术可用于在由一个或多个中间物理网络分离的多个计算节点之间提供虚拟网络,诸如从一个或多个中间物理网络的边缘通过修改进入和/或 离开中间物理网络。 在一些情况下,计算节点可以包括托管在一个或多个物理计算机或系统上的虚拟机节点,诸如由或由一个或多个用户(例如,程序执行服务的用户)代表。 通信的管理可以包括确定发送到被管理计算节点的通信是否被授权,以及仅当它们被确定被授权时才将该通信提供给计算节点。

    CONFIGURING COMMUNICATIONS BETWEEN COMPUTING NODES
    7.
    发明申请
    CONFIGURING COMMUNICATIONS BETWEEN COMPUTING NODES 有权
    配置计算机之间的通信

    公开(公告)号:US20090248846A1

    公开(公告)日:2009-10-01

    申请号:US12060074

    申请日:2008-03-31

    申请人: Daniel T. Cohn

    发明人: Daniel T. Cohn

    IPC分类号: G06F15/173

    摘要: Techniques are described for configuring communications between multiple computing nodes, such as computing nodes that are separated by one or more physical networks. In some situations, the techniques may be used to provide a virtual network between multiple computing nodes that are separated by one or more intermediate physical networks, such as from the edge of the one or more intermediate physical networks by modifying communications that enter and/or leave the intermediate physical networks so as to provide an overlay network without encapsulation of the communications. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users (e.g., users of a program execution service).

    摘要翻译: 描述了用于配置多个计算节点之间的通信的技术,诸如由一个或多个物理网络分离的计算节点。 在某些情况下,这些技术可用于在由一个或多个中间物理网络分离的多个计算节点之间提供虚拟网络,诸如从一个或多个中间物理网络的边缘通过修改进入和/或 离开中间物理网络,以便提供覆盖网络而不封装通信。 在一些情况下,计算节点可以包括托管在一个或多个物理计算机或系统上的虚拟机节点,诸如由或由一个或多个用户(例如,程序执行服务的用户)代表。

    Maintaining packet order in network flows over an autonomous network

    公开(公告)号:US09729350B1

    公开(公告)日:2017-08-08

    申请号:US13073182

    申请日:2011-03-28

    申请人: Daniel T. Cohn

    发明人: Daniel T. Cohn

    摘要: Technologies are described herein for maintaining packet order in network flows over an autonomous network. A sequence number is generated for each data packet in the network flow. The data packets are transmitted from a source endpoint to a destination endpoint accompanied by the sequence number. When a data packet is received at the destination endpoint, the sequence number is utilized to determine whether the packet has arrived out-of-order. If the received data packet is out-of-order, the packet is buffered for a specific period of time, or until the next sequential packet in the network flow is received. If the next sequential packet is received within the time period, the received packet and any buffered packets are delivered in sequence number order to a program executing on the destination endpoint. If the time period expires before receiving the next sequential data packet, the buffered packet(s) are delivered to the program.

    DYNAMICALLY MIGRATING COMPUTER NETWORKS
    10.
    发明申请
    DYNAMICALLY MIGRATING COMPUTER NETWORKS 审中-公开
    动态移动计算机网络

    公开(公告)号:US20130046874A1

    公开(公告)日:2013-02-21

    申请号:US13543538

    申请日:2012-07-06

    申请人: Daniel T. Cohn

    发明人: Daniel T. Cohn

    IPC分类号: G06F15/173

    摘要: Techniques are described for providing capabilities to dynamically migrate computing nodes between two or more computer networks while the computer networks are in use, such as to dynamically and incrementally migrate an entire originating first computer network to a destination second computer network at a remote location. For example, the first computer network may include one or more physically connected computer networks, while the second computer network may be a virtual computer network at a remote geographical location (e.g., under control of a network-accessible service available to remote users). The provided capabilities may further include facilitating the ongoing operations of the originating first computer network while a subset of the first computer network computing nodes have been migrated to the remote destination second computer network, such as by forwarding communications between the first and second computer networks in a manner that is transparent to the various computing nodes.

    摘要翻译: 描述了技术来提供在计算机网络正在使用的同时在两个或多个计算机网络之间动态迁移计算节点的能力,例如动态地和逐步地将整个始发的第一计算机网络迁移到远程位置的目的地第二计算机网络。 例如,第一计算机网络可以包括一个或多个物理连接的计算机网络,而第二计算机网络可以是远程地理位置处的虚拟计算机网络(例如,在远程用户可用的网络可访问服务的控制下)。 所提供的能力还可以包括促进始发的第一计算机网络的正在进行的操作,同时第一计算机网络计算节点的子集已被迁移到远程目的地第二计算机网络,例如通过在第一和第二计算机网络之间转发通信 一种对各种计算节点是透明的方式。