公开(公告)号：US11088944B2

公开(公告)日：2021-08-10

申请号：US16450690

申请日：2019-06-24

Applicant: Amazon Technologies, Inc.

Inventor： Stewart Allen ,  Andrew Davenport ,  Ciprian Dan Cosma ,  Anthony Nicholas Liguori ,  Joseph Elmar Magerramov

IPC: H04L12/703 ,  H04L12/935 ,  H04L12/747 ,  H04L29/06 ,  H04L12/707

Abstract: A program to be executed to perform a packet processing operation on a packet associated with a resource group, as well as security settings of the resource group, are received. The program is transmitted to a set of fast path nodes which were assigned to the resource group based on the group's metadata. With respect to a particular packet, security operations based on the settings are performed and the program is executed at a fast path node. Based at least partly on the results of the program, a packet routing action corresponding to the received packet is performed.

公开(公告)号：US11296981B2

公开(公告)日：2022-04-05

申请号：US16450720

申请日：2019-06-24

Applicant: Amazon Technologies, Inc.

Inventor： Stewart Allen ,  Andrew Davenport ,  Ciprian Dan Cosma ,  Anthony Nicholas Liguori ,  Joseph Elmar Magerramov ,  Nachiappan Arumugam

IPC: H04L12/721 ,  H04L45/00 ,  H04L47/70 ,  G06F9/455

Abstract: Indications of packet processing operations to be performed for packets of a resource group, as well as configuration settings of the group, are obtained. A packet that satisfies a requirement of the configuration settings and meets a fast path criterion is processed at a fast path node configured for the group. In response to determining that another packet does not satisfy a criterion for fast path processing, the other packet is transmitted to an exception path target.

公开(公告)号：US10944714B1

公开(公告)日：2021-03-09

申请号：US16385950

申请日：2019-04-16

Applicant: Amazon Technologies, Inc.

Inventor： Ciprian Dan Cosma

IPC: H04L12/14 ,  H04L29/06 ,  H04L29/12

Abstract: A request for a network address corresponding to a domain name is received. From a plurality of network addresses associated with the domain name, a network address is identified based at least in part on a request-property-based address selection criterion. The network address is included in a response to the request.