公开(公告)号：US10944834B1

公开(公告)日：2021-03-09

申请号：US15391547

申请日：2016-12-27

Applicant: Amazon Technologies, Inc.

Inventor： Christoph Saalfeld ,  Tristam Kyle MacDonald ,  Gary Wicker ,  Justin Robert Knoepfler ,  Kyle Michael Roche ,  Frank Lovecchio ,  Bryant Cutler ,  Qing Ju ,  Shyam Krishnamoorthy ,  Alexandra Elizabeth Baoboe Lee

IPC: H04L29/08 ,  G06F9/54

Abstract: A socket service may be used to link a peer socket to another peer socket. The peer socket is for communicating data to and from a client device and the other peer socket is for communicating data to and from another client device. If a socket opens and the corresponding peer socket is not yet open then the socket waits for the corresponding peer socket to open. When a client device requests a socket to be opened, the client device requests a particular client-defined function mapping to be associated with the socket. When the socket is opened, the endpoint specified in the client-defined function mapping is invoked. An identifier associated with the client device is sent to the endpoint. If the endpoint returns a socket identifier for another socket, then the socket service links the peer socket to the other peer socket, linking the client device to another client device.

公开(公告)号：US10382213B1

公开(公告)日：2019-08-13

申请号：US15250709

申请日：2016-08-29

Applicant: Amazon Technologies, Inc.

Inventor： Mark Edward Rafn ,  Ashutosh Thakur ,  Rameez Loladia ,  James Christopher Sorenson, III ,  Christoph Saalfeld

IPC: H04L9/32

Abstract: A technology is provided for certificate authentication for registering a certificate in computing service environment. A request may be received to register a certificate authority (CA) certificate. A registration token associated with a customer account in a service provider environment may be generated to enable association of the customer account with the CA certificate and to authenticate a registration of the CA certificate. The registration token may be sent to a requester desiring to register the CA certificate. A verification certificate that contains the registration token and that is signed by a certificate authority (CA) of the CA certificate and the CA certificate that is signed by the CA may be received to register the CA certificate with the customer account within a service provider environment The CA certificate is persisted with the service provider environment after verifying the registration token is associated with the customer account and the CA certificate is signed by the CA.

公开(公告)号：US11665110B1

公开(公告)日：2023-05-30

申请号：US16588808

申请日：2019-09-30

Applicant: Amazon Technologies, Inc.

Inventor： Himanshu Jindal ,  Christoph Saalfeld ,  Saurabh Chatterjee

IPC: G06F15/173 ,  H04L47/70 ,  H04L47/74 ,  H04L47/78 ,  H04L67/51

CPC classification number: H04L47/826 ,  H04L47/746 ,  H04L47/781 ,  H04L47/823 ,  H04L67/51

Abstract: After a service receives a request from another service, the service determines an amount of time to process the request by the service as well as a remaining time allotment to complete processing the request (e.g., a timeout value). Based on the remaining time allotment and the amount of time to process the request by at least the service (predicted time or actual time), the service may determine whether to continue processing the request (e.g., by the service and/or one or more subsequent services) or fail the request. In response, the service may then continue processing the request (e.g., continue processing at the service itself or propagate the request to the next service), or the service may fail the request.

公开(公告)号：US11381506B1

公开(公告)日：2022-07-05

申请号：US16833327

申请日：2020-03-27

Applicant: Amazon Technologies, Inc.

Inventor： Himanshu Jindal ,  Christoph Saalfeld

IPC: H04L47/125 ,  H04L45/24 ,  H04L67/1029 ,  H04L67/1025 ,  G06F11/34 ,  G06N20/00

Abstract: Adaptive load balancing may be implemented for a distributed system. An evaluation of criteria for creating a mapping for an identifier associated with requests may be performed. The created mapping may route requests to a distributed system to request handling nodes that cache request information for performing the requests. When requests are received, if an identifier determined to be associated with the request is mapped to request handling nodes, then the request may be sent to the identified request handling nodes instead of performing a load balancing technique to select a request handling node for the request.

公开(公告)号：US10230664B1

公开(公告)日：2019-03-12

申请号：US14860615

申请日：2015-09-21

Applicant: AMAZON TECHNOLOGIES, INC.

Inventor： Dmitry Pushkarev ,  Joshua Marc Burgin ,  Aniruddha Shrlram Daptardar ,  Derek Solomon Pai ,  Joby Sky Lafky ,  Anupama Sharma ,  Christoph Saalfeld

IPC: G06F15/173 ,  H04L12/911

Abstract: This document describes techniques for allocating instances in a service provider network. In an example embodiment, a resource manager provides a number of allocation strategies for determining which instances to assign to a client. The resource manager applies a client selected one of the allocation strategies to assign instances to the client. One of the allocation strategies includes determining for each of a plurality of pools of resource instances, an estimate of time that a unit cost of each of the number of resource instances in the pool will be no more than a maximum unit cost specified by the client. The instances are assigned to the client while the unit cost of the instances is less than a client specified amount.

公开(公告)号：US20210160325A1

公开(公告)日：2021-05-27

申请号：US16712896

申请日：2019-12-12

Applicant: Amazon Technologies, Inc.

Inventor： Alexandra Elizabeth Baoboe Lee ,  Nicholas A. Gochenaur ,  Christoph Saalfeld ,  Himanshu Jindal ,  Eeshan Shreeram Thakar ,  Jared Sharfin

IPC: H04L29/08 ,  H04L29/06 ,  G06F9/54

Abstract: Systems and methods are provided for dynamically configuring an IoT communications system. The IoT communications system receives a client message from an IoT device. The client message includes an endpoint designation (such as by specifying an endpoint in the Server Name Indication (SNI) field of the TLS client hello message). The IoT communications system determines whether the endpoint is associated with a custom or default processing logic and/or settings. Either custom or default processing logic is executed or custom or default settings are applied.

公开(公告)号：US10778585B1

公开(公告)日：2020-09-15

申请号：US15365859

申请日：2016-11-30

Applicant: Amazon Technologies, Inc.

Inventor： Christoph Saalfeld ,  Calvin Yue-Ren Kuo ,  James Christopher Sorenson, III ,  Alexandra Elizabeth Baoboe Lee ,  Bryant Cutler ,  Aditya Bhalla ,  Shyam Krishnamoorthy ,  Tristam Kyle MacDonald

IPC: H04L12/803 ,  H04L29/08 ,  H04L12/26 ,  H04L12/64

Abstract: Compute hosts and a routing system may be used for connection and application state migration for uninterrupted service availability. In response to an indication to transfer a connection from a particular compute host to another compute host, the particular compute host obtains a connection state and an application state for the connection and sends the connection state and the application state to the other compute host. The connection state includes information for a connection-oriented protocol and the application state includes information for an application-layer protocol. The other compute host receives and applies the connection state and the application state in order to establish a termination point to terminate the connection at the other compute host instead of at the particular compute host. The data for the connection is routed to the other compute host, wherein the client is unaware of transfer of the connection to the other compute host.

公开(公告)号：US10594570B1

公开(公告)日：2020-03-17

申请号：US15391530

申请日：2016-12-27

Applicant: Amazon Technologies, Inc.

Inventor： Christoph Saalfeld ,  Tristam Kyle MacDonald ,  Gary Wicker ,  Justin Robert Knoepfler ,  Kyle Michael Roche ,  Frank Lovecchio ,  Bryant Cutler ,  Qing Ju ,  Shyam Krishnamoorthy ,  Alexandra Elizabeth Baoboe Lee

IPC: H04L12/24 ,  G06F9/54 ,  H04L29/06

Abstract: A socket service may be used to implement client-defined function mappings (e.g., custom protocols) for sockets hosted by the socket service so that when a particular socket is opened for a particular client device, the socket operates according to a particular client-defined function mapping requested by the particular client device. To establish a particular client-defined function mapping, a socket manager may receive request from a user that specifies a particular endpoint (e.g., a client-registered function). When a client device requests a socket to be opened, the client device requests the particular client-defined function mapping to be associated with the socket. When the socket is opened, the endpoint is invoked. The particular client-defined function mapping may also specify one or more receive criteria for data received at the socket. If the one or more receive criteria is met, the endpoint is invoked by sending the data to the endpoint.

公开(公告)号：US10069693B1

公开(公告)日：2018-09-04

申请号：US14568086

申请日：2014-12-11

Applicant: Amazon Technologies, Inc.

Inventor： Aniruddha Shriram Daptardar ,  Aditya Subhash Jadhav ,  Jin Seop Kim ,  Douglas Cotton Kurtz ,  Asem Rustum ,  Christoph Saalfeld

IPC: G06F15/173 ,  H04L12/24

Abstract: In a computing environment, a request to fulfill a computational task and a constraint for fulfilling the computational task is received from an entity. The request is independent of the quantity or type of resource slot to fulfill the computation task. The quantity or type of resource slots sufficient to fulfill the request is determined in accordance with a constraint. The resource slots are associated with the entity and allocated a plurality of geographically separate computing environments. Master resource slots are allocated in the geographically separate computing environments based on the criterion and the quantity or type of resource slots. The master resource slots can be reallocated based on changes to the allocated resources slots.

公开(公告)号：US12063267B1

公开(公告)日：2024-08-13

申请号：US18067585

申请日：2022-12-16

Applicant: Amazon Technologies, Inc.

Inventor： Shijia Yang ,  Christoph Saalfeld ,  Eeshan Shreeram Thakar ,  Artem Zhurid

IPC: H04L67/1008 ,  H04L43/062 ,  H04L43/0817

CPC classification number: H04L67/1008 ,  H04L43/062 ,  H04L43/0817

Abstract: The present disclosure generally relates to leveraging DNS (Domain Name Service) based client-side load balancing that directs IoT devices (clients) to network load balancer IP addresses. A management system obtains socket usage information about publicly accessible network load balancers. The system then uses socket thresholding information to determine whether individual network load balancers are exhausting a fixed set of available sockets. The system can then implement remedial actions to reduce individual network load balance presence to ensure that the IoT devices are equally distributed across all first layer network load balancers to maximize usage of capacity.