公开(公告)号：US12177110B1

公开(公告)日：2024-12-24

申请号：US18192594

申请日：2023-03-29

Applicant: Amazon Technologies, Inc.

Inventor： Akshay Choudhry ,  Ethan Joseph Torretta ,  Scott Douglas Morrison ,  Mathew Lehwess ,  Shakeel Ahmad ,  Justin Davies

IPC: H04L45/02 ,  H04L45/28 ,  H04L45/42

Abstract: Techniques for resource-based network traffic management are described. A service of a cloud provider network receives a traffic policy, the traffic policy identifying a path to a gateway to an external network, the path identifies at least one network function in the path by a resource identifier of the cloud provider network. Traffic policy association data is received, the traffic policy association data associating the traffic policy with one or more virtual networks hosted by the cloud provider network. A network configuration of the cloud provider network is updated to route network traffic from a first virtual network to the gateway to the external network through the network function.

公开(公告)号：US12177123B1

公开(公告)日：2024-12-24

申请号：US17810290

申请日：2022-06-30

Applicant: Amazon Technologies, Inc.

Inventor： Young Ha Jung ,  Upendra Bhalchandra Shevade ,  Mathew Lehwess ,  Matthew B Barr ,  Akshay Choudhry ,  Shuai Ye ,  Ethan Joseph Torretta ,  Kirk Arlo Petersen

IPC: H04L45/745

Abstract: Route tables may be associated with ingress traffic for logically isolated networks. A routing device at the edge of a logically isolated network may receive a route to include in a route table that is associated with ingress traffic to the logically isolated network, where the ingress traffic is destined for a block of public or private IP addresses. The route instructs the edge routing device to forward such ingress traffic to a network interface of a network appliance hosted in the logically isolated network. Network packets received at the edge routing device may have a destination of one or more public or private IP addresses in the block of public/private IP addresses. The edge routing device may identify the route in the route table that forwards the ingress network traffic destined for the block of public or private IP addresses to the network interface for the network appliance.