-
公开(公告)号:US12212482B2
公开(公告)日:2025-01-28
申请号:US17933067
申请日:2022-09-16
Applicant: Amazon Technologies, Inc.
Inventor: Bashuman Deb , Paul John Tillotson , Thomas Nguyen Spendley , Omer Hashmi , Baihu Qian , Mohamed Nader Farahat Hassan
Abstract: Network pathways are identified to transfer packets between a pair of regional virtual traffic hubs of a provider network. At a first hub of the pair, a first action is performed, resulting in a transmission of a packet received from a first isolated network to the second hub along a pathway selected using dynamic routing parameters. At the second hub, a second action is performed, resulting in the transmission of the packet to a destination within a second isolated network.
-
公开(公告)号:US20230079670A1
公开(公告)日:2023-03-16
申请号:US17933067
申请日:2022-09-16
Applicant: Amazon Technologies, Inc.
Inventor: Bashuman Deb , Paul John Tillotson , Thomas Nguyen Spendley , Omer Hashmi , Baihu Qian , Mohamed Nader Farahat Hassan
Abstract: Network pathways are identified to transfer packets between a pair of regional virtual traffic hubs of a provider network. At a first hub of the pair, a first action is performed, resulting in a transmission of a packet received from a first isolated network to the second hub along a pathway selected using dynamic routing parameters. At the second hub, a second action is performed, resulting in the transmission of the packet to a destination within a second isolated network.
-
公开(公告)号:US11601365B2
公开(公告)日:2023-03-07
申请号:US17218036
申请日:2021-03-30
Applicant: Amazon Technologies, Inc.
Inventor: Baihu Qian , Omer Hashmi , Thomas Nguyen Spendley , Bashuman Deb , Shridhar Kulkarni , Paul John Tillotson , Ramin Ali Dousti , Indira Radhika Pulla , Steve Ge , Nicholas Ryan Lombardi , Nick Matthews , Anoop Dawani
IPC: H04L45/586 , H04L45/02 , H04L45/16
Abstract: An indication of a set of premises between which network traffic is to be routed via a private fiber backbone of a provider network is obtained. Respective virtual routers are configured for a first premise and a second premise, and connectivity is established between the virtual routers and routing information sources at the premises. Contents of at least one network packet originating at the first premise are transmitted to the second premise via the private fiber backbone using routing information obtained at the virtual routers from the routing information source at the second premise.
-
公开(公告)号:US20220321471A1
公开(公告)日:2022-10-06
申请号:US17218039
申请日:2021-03-30
Applicant: Amazon Technologies, Inc.
Inventor: Bashuman Deb , Omer Hashmi , Thomas Nguyen Spendley , Baihu Qian , Guru Kannan , Shridhar Kulkarni , Paul John Tillotson , Ramin Ali Dousti , Indira Radhika Pulla , Yuxin Ren , Fahed Hijazi , Xiyuan Gou , Steve Ge , Nicholas Ryan Lombardi , Brandon Michael LaRue , Jaywant U. Kapadnis , Anoop Dawani
IPC: H04L12/713 , H04L12/741 , H04L29/06 , H04L29/08
Abstract: A message indicating an auxiliary task associated with traffic transmitted via a virtual router between a pair of isolated networks is received at an offloading device. A stack multiplexer at the offloading device selects a protocol stack instance to process the message. A result of the auxiliary task is obtained by the multiplexer from the selected protocol stack instance and transmitted to the virtual router, where it is used to transmit a packet between the isolated networks.
-
公开(公告)号:US20220321470A1
公开(公告)日:2022-10-06
申请号:US17218036
申请日:2021-03-30
Applicant: Amazon Technologies, Inc.
Inventor: Baihu Qian , Omer Hashmi , Thomas Nguyen Spendley , Bashuman Deb , Shridhar Kulkarni , Paul John Tillotson , Ramin Ali Dousti , Indira Radhika Pulla , Steve Ge , Nicholas Ryan Lombardi , Nick Matthews , Anoop Dawani
IPC: H04L12/713 , H04L12/715 , H04L12/761
Abstract: An indication of a set of premises between which network traffic is to be routed via a private fiber backbone of a provider network is obtained. Respective virtual routers are configured for a first premise and a second premise, and connectivity is established between the virtual routers and routing information sources at the premises. Contents of at least one network packet originating at the first premise are transmitted to the second premise via the private fiber backbone using routing information obtained at the virtual routers from the routing information source at the second premise.
-
公开(公告)号:US10742554B2
公开(公告)日:2020-08-11
申请号:US16196709
申请日:2018-11-20
Applicant: Amazon Technologies, Inc.
Inventor: Bashuman Deb , Paul John Tillotson , Thomas Nguyen Spendley , Omer Hashmi , Baihu Qian , Mohamed Nader Farahat Hassan
IPC: H04L12/741 , H04L12/931 , H04L12/721 , H04L12/751 , H04L29/06 , G06F9/455 , H04L29/08
Abstract: At an action implementation layer of a virtual traffic hub, a packet is obtained from a first isolated network. A first action, generated at a decision making layer of the hub based on a first route table of the hub, is performed, resulting in transmission of at least one network packet to a first destination. In response to a second packet, obtained at the action implementation layer from a source outside the first isolated network, a second action is performed, resulting in transmission of at least one packet to a second destination. The second action is generated based on a second route table of the hub.
-
公开(公告)号:US11991211B1
公开(公告)日:2024-05-21
申请号:US17643781
申请日:2021-12-10
Applicant: Amazon Technologies, Inc.
Inventor: Hrushikesh Jaibheem Gangur , Tomasz Jozef Adamski , Christian Elsen , Baihu Qian , Nick Matthews , Omer Hashmi , Bashuman Deb , Thomas Nguyen Spendley
CPC classification number: H04L63/20 , H04L12/4675 , H04L63/0263 , H04L63/0272
Abstract: Systems and methods are provided for enforcing symmetric flows of cross-region network traffic through firewalls in multi-region network environments. Enforcement may be configured automatically by analyzing network policy data to identify cross-region traffic that is to be firewalled, and configuring gateway nodes in the various regions to implement symmetric bidirectional flows through any firewalls in the communication path. Beneficially, by enforcing symmetric bi-directional flows of traffic through any firewalls in a communication path, the firewalls may maintain the state of a given communication session even when the communication session is between endpoints in different regions that have different architectures.
-
公开(公告)号:US11936558B1
公开(公告)日:2024-03-19
申请号:US17643774
申请日:2021-12-10
Applicant: Amazon Technologies, Inc.
Inventor: Baihu Qian , Bashuman Deb , Justin Lin Hsieh , Daniel William Dacosta , Nick Matthews , Anoop Dawani , Omer Hashmi , Thomas Nguyen Spendley , Viktor Heorhiadi
IPC: H04L45/42 , H04L12/46 , H04L45/00 , H04L45/12 , H04L45/745
CPC classification number: H04L45/42 , H04L12/4641 , H04L45/123 , H04L45/22 , H04L45/745
Abstract: Systems and methods are provided for evaluation of networks and changes thereto using automated analysis of network models. The automated analysis can be used to determine how to implement and mutate networks efficiently and effectively, to determine whether and why network resources are unable to communicate with each other, and the like. Automated analysis can allow users (e.g., network administrators) to define networks and pose changes to networks using high-level policies (e.g., written in a declarative language), have those polices automatically translated to lower-level implementation operations for analysis, and in some cases have results of the analysis presented back to the users in an easy-to-understand form.
-
公开(公告)号:US11824773B2
公开(公告)日:2023-11-21
申请号:US17218031
申请日:2021-03-30
Applicant: Amazon Technologies, Inc.
Inventor: Baihu Qian , Omer Hashmi , Thomas Nguyen Spendley , Bashuman Deb , Shridhar Kulkarni , Paul John Tillotson , Indira Radhika Pulla , Ramin Ali Dousti , Nicholas Ryan Lombardi , Steve Ge , Nick Matthews , Anoop Dawani
IPC: H04L45/586 , H04L45/24 , H04L12/46 , H04L45/00 , H04L45/02
CPC classification number: H04L45/586 , H04L12/4641 , H04L45/02 , H04L45/20 , H04L45/24
Abstract: A pair of virtual routers is configured. In response to programmatic requests, dynamic transfer of routing information between the routers in accordance with configuration settings indicated by a client is enabled. The routing information is associated with a set of isolated networks to which the virtual routers are attached. A network packet originating at an address in a first isolated network is transmitted to an address in a second isolated network using a route determined from routing information transmitted between the virtual routers according to the configuration settings.
-
公开(公告)号:US11729077B2
公开(公告)日:2023-08-15
申请号:US16699431
申请日:2019-11-29
Applicant: Amazon Technologies, Inc.
Inventor: Baihu Qian , Bashuman Deb , Omer Hashmi , Thomas Nguyen Spendley , Nikhil Reddy Cheruku , Alok Mishra , Alexander Justin Penney
IPC: H04L41/0813 , H04L41/22 , H04L9/40 , H04L43/0817 , H04L43/0823
CPC classification number: H04L43/0817 , H04L41/0813 , H04L41/22 , H04L43/0823 , H04L63/0272
Abstract: This disclosure describes techniques for configuring and managing scalable global private networks associated with a service provider. Different input mechanisms, such as an API, a UI, or a CLI may be utilized to configure, and manage a global private network that spans across the cloud in different geographic locations and connects to different stand-alone networks. The user may proactively use the input mechanisms to configure and query different network resources to reactively configure settings for reacting to one or more events. The input mechanisms may also be utilized to define the network resources to be modeled within the global private network as well as connections within the global network. A user may configure events/metrics to be monitored, tasks/workflows to be performed, and the like. In some configurations, a network management service (NMS) may perform health monitoring and reachability monitoring to identify possible issues in the global network.
-
-
-
-
-
-
-
-
-