公开(公告)号：US09935816B1

公开(公告)日：2018-04-03

申请号：US14741188

申请日：2015-06-16

Applicant: Amazon Technologies, Inc.

Inventor： Po-Chun Chen ,  Mark Edward Stalzer ,  Andrew Hemstreet Redmon

IPC: G06F15/16 ,  H04L12/24 ,  H04L12/751 ,  H04L12/713

CPC classification number: H04L41/0206 ,  H04L41/0816 ,  H04L45/02 ,  H04L45/586

Abstract: A technology is described for updating an Autonomous System Number (ASN) in a Border Gateway Protocol (BGP) routing configuration. An example method may include receiving a request to update a BGP routing configuration on a gateway with an ASN associated with a customer. In response to the request, the BGP routing configuration on the gateway may be updated to replace a default ASN associated with a computing service provider with the ASN associated with the customer. The BGP routing configuration on the gateway may also be updated to allow the ASN associated with the customer to appear in an Autonomous System (AS) path at least twice, thereby allowing for BGP routes to be exchanged between gateways.

公开(公告)号：US10771309B1

公开(公告)日：2020-09-08

申请号：US15926849

申请日：2018-03-20

Applicant: Amazon Technologies, Inc.

Inventor： Po-Chun Chen ,  Mark Edward Stalzer ,  Andrew Hemstreet Redmon

IPC: G06F15/173 ,  H04L12/24 ,  H04L12/713 ,  H04L12/751

Abstract: A technology is described for updating an Autonomous System Number (ASN) in a Border Gateway Protocol (BGP) routing configuration. An example method may include receiving a request to update a BGP routing configuration on a gateway with an ASN associated with a customer. In response to the request, the BGP routing configuration on the gateway may be updated to replace a default ASN associated with a computing service provider with the ASN associated with the customer. The BGP routing configuration on the gateway may also be updated to allow the ASN associated with the customer to appear in an Autonomous System (AS) path at least twice, thereby allowing for BGP routes to be exchanged between gateways.

公开(公告)号：US10917334B1

公开(公告)日：2021-02-09

申请号：US15712647

申请日：2017-09-22

Applicant: Amazon Technologies, Inc.

Inventor： James Michael Lamanna ,  Andrew Hemstreet Redmon ,  David Gonzales

IPC: H04L12/707 ,  H04L12/751 ,  H04L12/723 ,  H04L12/717

Abstract: Technologies are provided for expanding computer network route advertisements. A route expansion server can be configured to receive route advertisements from a router, generate an expanded route advertisement that includes additional network route information, and transmit the expanded route advertisement to another router. The route expansion server can receive a route advertisement from a network zone edge router, comprising a network address prefix. The route expansion server can look up one or more additional network address prefixes associated with the edge router and generate an expanded route advertisement message that indicates that the edge router is a potential next hop for the network address prefix and the one or more additional network address prefixes. The route expansion server can transmit the expanded route advertisement message to another router. In at least some embodiments, the route expansion server can generate different expanded route advertisement messages for different routers.

公开(公告)号：US10516652B1

公开(公告)日：2019-12-24

申请号：US15445459

申请日：2017-02-28

Applicant: AMAZON TECHNOLOGIES, INC.

Inventor： Omer Hashmi ,  Andrew Hemstreet Redmon

IPC: H04L29/06 ,  G06F9/455

Abstract: A system (and method) includes a plurality of compute devices configured to execute an endpoint node and a provisioning service. The endpoint node is configured to establish an encrypted communication channel over a public network. The provisioning service is configured to retrieve configuration parameters from a database. The configuration parameters define a security association for the encrypted communication channel and include an encryption key and an identifier of an encryption algorithm. The provisioning service is configured to transmit the configuration parameters to the endpoint node for use in implementation of a security association for the encrypted communication channel.