One-to many stateless load balancing
    2.
    发明授权
    One-to many stateless load balancing 有权
    一对多无状态负载平衡

    公开(公告)号:US08850002B1

    公开(公告)日:2014-09-30

    申请号:US13540423

    申请日:2012-07-02

    摘要: A stateless load balancer may route a request to a computing device without tracking state information of the communication connection that delivered the request. The stateless load balancer may receive a request that is initiated by a client device. The request may be transported to the stateless load balancer via a communication connection that includes a public destination internet protocol (IP) address. One of the routing devices in the stateless load balancer may obtain connection tuples of the communication connection that transported the request, in which the connection tuples include the public destination IP address. Once obtained, the routing device may generate a hash value from one or more connection tuples. Subsequently, the routing device may map the hash value to a target network address of a particular computing device in a cluster of multiple computing devices by accessing stored mapping data, and then route the request to the particular computing device for processing.

    摘要翻译: 无状态负载平衡器可以将请求路由到计算设备,而不跟踪递送请求的通信连接的状态信息。 无状态负载平衡器可以接收由客户端设备启动的请求。 该请求可以经由包括公共目的地网际协议(IP)地址的通信连接传送到无状态负载平衡器。 无状态负载平衡器中的一个路由设备可以获得传输请求的通信连接的连接元组,其中连接元组包括公共目的地IP地址。 一旦获得,路由设备可以从一个或多个连接元组生成哈希值。 随后,路由设备可以通过访问存储的映射数据将散列值映射到多个计算设备的集群中的特定计算设备的目标网络地址,然后将该请求路由到特定的计算设备进行处理。

    Detecting undesirable computing activity
    3.
    发明授权
    Detecting undesirable computing activity 有权
    检测不良计算活动

    公开(公告)号:US08938803B1

    公开(公告)日:2015-01-20

    申请号:US13165336

    申请日:2011-06-21

    IPC分类号: G06F12/14 H04L29/06

    摘要: Instances executing within a programmable execution service (“PES”) that are engaged in undesirable computing activity can be identified by comparing activity performed by instances executing within the PES to data describing known undesirable computing activity. Once compromised instances have been identified, other previously unknown undesirable computing activity performed by the compromised instances can be identified by determining whether activity is performed by the compromised instances significantly more often than other instances executing within the PES. New undesirable computing activity discovered using this process could then be utilized to discover other compromised instances.

    摘要翻译: 可以通过将在PES内执行的实例执行的活动与描述已知的不期望的计算活动的数据进行比较来识别在可执行执行服务(“PES”)中执行的不期望的计算活动的实例。 一旦已经确定了受损的实例,则可以通过确定活动是否被受损的实例明显地比在PES内部执行的其他实例更频繁地进行来识别被受损的实例执行的其他先前未知的不期望的计算活动。 然后可以利用使用此过程发现的新的不希望的计算活动来发现其他受损的实例。

    Providing ad information using plural content providers
    5.
    发明授权
    Providing ad information using plural content providers 有权
    使用多个内容提供商提供广告信息

    公开(公告)号:US07882046B1

    公开(公告)日:2011-02-01

    申请号:US11694699

    申请日:2007-03-30

    IPC分类号: G06F15/18

    CPC分类号: G06N99/005

    摘要: An ad system is described for providing ad selections in response to an ad presentation opportunity. The ad system can use multiple content providers to generate multiple sets of ad candidates. The content providers can apply different ad selection paradigms in generating their sets of ad candidates. The paradigms may act on different aspects of a context pertaining to the ad presentation opportunity. A chooser module and filtering module can cull the set of ad selections from among the plural sets of ad candidates. At least one content provider uses machine learning functionality in generating ad candidates, such as a Naïve Bayesian approach, an affiliate similarity approach, etc. Various content providers also find application in a stand-alone mode.

    摘要翻译: 描述了一种广告系统,用于提供广告选择以响应广告展示机会。 广告系统可以使用多个内容提供商生成多组广告候选。 内容提供商可以应用不同的广告选择范例来生成他们的广告候选组。 范例可以对与广告呈现机会相关的上下文的不同方面采取行动。 选择器模块和过滤模块可以从多组广告候选中剔除一组广告选择。 至少一个内容提供商使用机器学习功能来生成广告候选者,例如朴素贝叶斯方法,附属机构相似性方法等。各种内容提供商也可以以独立模式查找应用程序。

    Remotely configured network appliances and services
    7.
    发明授权
    Remotely configured network appliances and services 有权
    远程配置的网络设备和服务

    公开(公告)号:US09294437B1

    公开(公告)日:2016-03-22

    申请号:US13461478

    申请日:2012-05-01

    IPC分类号: G06F15/173 H04L29/06

    摘要: A network gateway is implemented on behalf of a customer entity. The network gateway may be implemented using a distributed computer system and the network gateway may connect a network of the customer entity to a public communications network. The network gateway may include network-related services without the need for adding specialized hardware. The network gateway may be provisioned programmatically in response to instructions received from the customer entity. The network gateway may be provisionable and accessible over several different types of data connections. The network gateway, by virtue of being implemented on a distributed computer system, is scalable upon demand without additional input by the customer entity.

    摘要翻译: 代表客户实体实现网络网关。 网络网关可以使用分布式计算机系统来实现,并且网络网关可以将客户实体的网络连接到公共通信网络。 网络网关可以包括网络相关服务,而不需要添加专门的硬件。 响应于从客户实体接收到的指令,网络网关可以以编程方式提供。 网络网关可以通过几种不同类型的数据连接进行配置和访问。 网络网关凭借在分布式计算机系统上的实现,可根据需要进行扩展,而无需客户实体的额外输入。

    Network gateway services and extensions
    8.
    发明授权
    Network gateway services and extensions 有权
    网络网关服务和扩展

    公开(公告)号:US09288182B1

    公开(公告)日:2016-03-15

    申请号:US13461566

    申请日:2012-05-01

    摘要: A network gateway is implemented on behalf of a customer entity. The network gateway may be implemented using a distributed computer system and the network gateway may connect a network of the customer entity to a public communications network. The network gateway may include network-related services without the need for adding specialized hardware. The network gateway may be provisioned programmatically in response to instructions received from the customer entity. The network gateway may be provisionable and accessible over several different types of data connections. The network gateway, by virtue of being implemented on a distributed computer system, is scalable upon demand without additional input by the customer entity.

    摘要翻译: 代表客户实体实现网络网关。 网络网关可以使用分布式计算机系统来实现,并且网络网关可以将客户实体的网络连接到公共通信网络。 网络网关可以包括网络相关服务,而不需要添加专门的硬件。 响应于从客户实体接收到的指令,网络网关可以以编程方式提供。 网络网关可以通过几种不同类型的数据连接进行配置和访问。 网络网关凭借在分布式计算机系统上的实现,可根据需要进行扩展,而无需客户实体的额外输入。

    Managing external communications for provided computer networks
    9.
    发明授权
    Managing external communications for provided computer networks 有权
    管理提供的计算机网络的外部通信

    公开(公告)号:US08645508B1

    公开(公告)日:2014-02-04

    申请号:US12717001

    申请日:2010-03-03

    IPC分类号: G06F15/173

    摘要: Techniques are described for providing managed computer networks. In some situations, the techniques include managing communications for computing nodes of a managed computer network by using a pool of multiple alternative intermediate destinations to forward at least some communications to other final destinations. For example, a manager module associated with a source computing node may select a particular one of multiple alternative intermediate destinations to use for one or more particular communications from the source computing node to an indicated final destination, such as based on network addresses associated with the source computing node and/or the final destination. The multiple alternative intermediate destinations may have various forms, including multiple alternative edge devices at a first location at which various computing nodes are co-located that operate to manage communications between those co-located computing nodes at the first location and other external computer systems at one or more other locations.

    摘要翻译: 描述了提供托管计算机网络的技术。 在某些情况下,这些技术包括通过使用多个替代中间目的地的池来管理被管理计算机网络的计算节点的通信,以将至少一些通信转发到其他最终目的地。 例如,与源计算节点相关联的管理器模块可以选择多个替代中间目的地中的特定一个,以用于从源计算节点到所指示的最终目的地的一个或多个特定通信,诸如基于与 源计算节点和/或最终目的地。 多个替代的中间目的地可以具有各种形式,包括在第一位置处的多个替代边缘设备,在该第一位置处,各种计算节点位于同一位置,其操作以管理在第一位置处的那些共处的计算节点与其他外部计算机系统之间的通信 一个或多个其他位置。

    Outside live migration
    10.
    发明授权

    公开(公告)号:US10009315B2

    公开(公告)日:2018-06-26

    申请号:US13044494

    申请日:2011-03-09

    摘要: Global remappable addresses can be announced from multiple points across the Internet or other public networks. A global address can be mapped to one or more internal addresses for a provider, such that when traffic is received to a given network location the provider can determine whether the traffic is to be processed in the current network location or a different network location, as may be determined using a static process or a dynamic process based on any of a number of factors. If the traffic is destined for a different network location, the traffic can be remapped and forwarded to that network location over a public or private network. Once the traffic is in the determined destination network location, the traffic can be remapped and delivered to the ultimate destination. The remappings and destination network locations can be adjusted at any time, based on any of a number of factors, without significant risk of dropping traffic.