公开(公告)号：US20240333775A1

公开(公告)日：2024-10-03

申请号：US18741445

申请日：2024-06-12

Applicant: Amazon Technologies, Inc.

Inventor： Baihu Qian ,  Bashuman Deb ,  Justin Lin Hsieh ,  Daniel William Dacosta ,  Nick Matthews ,  Viktor Heorhiadi ,  Lalith Kumar Ramamoorthi ,  Anoop Dawani ,  Omer Hashmi ,  Thomas Nguyen Spendley

IPC: H04L9/40 ,  H04L12/46 ,  H04L41/0893 ,  H04L45/24 ,  H04L47/20

CPC classification number: H04L63/205 ,  H04L12/4675 ,  H04L41/0893 ,  H04L45/24 ,  H04L47/20 ,  H04L63/0272

Abstract: Systems and methods are provided for obtaining policy data associated with a private network implemented at least partly within a cloud provider network; establishing, based on the policy data, a first segment within the private network, wherein in a first geographic region of the cloud provider network, traffic associated with the first segment is isolated from traffic associated with a second segment of the private network, and wherein in a second geographic region of the cloud provider network, traffic associated with the first segment is isolated from traffic associated with a third segment of the private network; obtaining metadata indicating an isolated network of the cloud provider network is associated with the first segment; and enabling the isolated network to communicate, over the first segment, across the first geographic region and the second geographic region.

公开(公告)号：US12021902B1

公开(公告)日：2024-06-25

申请号：US17643769

申请日：2021-12-10

Applicant: Amazon Technologies, Inc.

Inventor： Baihu Qian ,  Bashuman Deb ,  Justin Lin Hsieh ,  Daniel William Dacosta ,  Nick Matthews ,  Viktor Heorhiadi ,  Lalith Kumar Ramamoorthi ,  Anoop Dawani ,  Omer Hashmi ,  Thomas Nguyen Spendley

IPC: H04L29/06 ,  H04L9/40 ,  H04L12/46 ,  H04L41/0893 ,  H04L45/24 ,  H04L47/20

CPC classification number: H04L63/205 ,  H04L12/4675 ,  H04L41/0893 ,  H04L45/24 ,  H04L47/20 ,  H04L63/0272

Abstract: Systems and methods are provided for evaluation of communication paths through networks to determine whether communication is permitted across one or more internal network boundaries. The analysis may be used to determine whether a node in one isolated network (e.g., VPC, VPN, client on-premise network, etc.) is able to communicate with a node in another isolated network across region and/or segment boundaries. The automated analysis can allow users (e.g., network administrators) to see what high-level policies (e.g., Cloud WAN policies written in a declarative language) are interfering with or permitting communication between the nodes.