-
公开(公告)号:US11881989B2
公开(公告)日:2024-01-23
申请号:US17239446
申请日:2021-04-23
Applicant: Amazon Technologies, Inc.
Inventor: James Christopher Sorenson, III , Yun Lin , David Carl Salyers , Ankur Khetrapal , Nishanth Alapati
IPC: H04L41/0803 , H04L67/1097 , H04L67/568 , H04L67/141 , H04L67/14
CPC classification number: H04L41/0803 , H04L67/1097 , H04L67/14 , H04L67/141 , H04L67/568
Abstract: A storage gateway serves as an interface between processes on a customer network and a service provider. The storage gateway is located on-premise with the customer processes. To customer processes, it appears that data is stored locally. However, the storage gateway interfaces with a remote storage service to store the data. For cached gateways, the primary data store is a remote data store, while frequently accessed data may be locally cached by the gateway. Reads may be satisfied from the local cache or from virtual data storage; writes are handled so as to appropriately update data blocks in the local cache and/or in virtual data storage. For shadowing gateways, the primary data store is the local data store; reads are passed through to a local data store, and writes are shadowed to virtual data storage as well as being sent to local data store.
-
公开(公告)号:US20210336844A1
公开(公告)日:2021-10-28
申请号:US17239446
申请日:2021-04-23
Applicant: Amazon Technologies, Inc.
Inventor: James Christopher Sorenson, III , Yun Lin , David Carl Salyers , Ankur Khetrapal , Nishanth Alapati
Abstract: A storage gateway serves as an interface between processes on a customer network and a service provider. The storage gateway is located on-premise with the customer processes. To customer processes, it appears that data is stored locally. However, the storage gateway interfaces with a remote storage service to store the data. For cached gateways, the primary data store is a remote data store, while frequently accessed data may be locally cached by the gateway. Reads may be satisfied from the local cache or from virtual data storage; writes are handled so as to appropriately update data blocks in the local cache and/or in virtual data storage. For shadowing gateways, the primary data store is the local data store; reads are passed through to a local data store, and writes are shadowed to virtual data storage as well as being sent to local data store.
-
公开(公告)号:US10536520B2
公开(公告)日:2020-01-14
申请号:US15076571
申请日:2016-03-21
Applicant: Amazon Technologies, Inc.
Inventor: James Christopher Sorenson, III , Yun Lin , David Carl Salyers , Ankur Khetrapal
Abstract: Methods, apparatus, and computer-accessible storage media for shadowing data stored on a local store to a remote store provided by a service provider. A gateway may be configured as a shadowing gateway on a customer network in response to receiving configuration information. The shadowing gateway may receive reads and writes to the local store. The gateway passes the requests to the local store, and also uploads write data indicated by the writes to the service provider to update a snapshot of the local store maintained by the service provider on the remote store. The write data may be buffered to a write log for uploading, and may be uploaded as blocks according to a block storage format used by the service provider. The shadowing process may be transparent to processes on the customer network. The shadowed data may be used to recover data on the local store.
-
公开(公告)号:US20180152501A1
公开(公告)日:2018-05-31
申请号:US15864259
申请日:2018-01-08
Applicant: Amazon Technologies, Inc.
Inventor: James Christopher Sorenson, III , Yun Lin , David Carl Salyers , Ankur Khetrapal , Nishanth Alapati
IPC: H04L29/08
CPC classification number: H04L67/10 , H04L67/1097 , H04L67/2842
Abstract: Methods, apparatus, and computer-accessible storage media for remotely managing a gateway that serves as an interface between processes on a customer network and a service provider, for example to store data to a remote data store. The gateway sends a connection request to a gateway control server. The server holds the connection until the server receives information (e.g., information from the customer sent via the service provider) for the gateway. The server sends the information as requests via the gateway-initiated connection, and continues to hold the connection. If a server receives information for a gateway to which it does not hold a connection, the server sends the information to the server that does hold the connection. The server may either discover the appropriate server via a registration service that registers connections to gateways or broadcast the information to peer servers identified through a registration service.
-
公开(公告)号:US20170230459A1
公开(公告)日:2017-08-10
申请号:US15495784
申请日:2017-04-24
Applicant: Amazon Technologies, Inc.
Inventor: Yun Lin , James Christopher Sorenson, III , David C. Salyers
Abstract: Methods, apparatus, and computer-accessible storage media for providing a volume-based block storage service and application programming interfaces (APIs) to the service. A block storage service and block storage service APIs may allow processes (applications or appliances) on the service client network to leverage remote, volume-based block storage provided by the service provider. The APIs may provide a standard interface to volume-based block storage operations on a remote data store. The service provider, the service clients, and/or third parties may develop various applications and/or appliances that may, for example, be instantiated in service clients' local networks and that leverage the block storage service via the APIs to create and manage volumes and snapshots on the remote data store and to upload and download data from the volumes and snapshots on the remote data store.
-
公开(公告)号:US09225697B2
公开(公告)日:2015-12-29
申请号:US14455525
申请日:2014-08-08
Applicant: Amazon Technologies, Inc.
Inventor: James Christopher Sorenson, III , Yun Lin , David Carl Salyers , Ankur Khetrapal , Mark J. Cavage
CPC classification number: H04L63/061 , H04L63/0807 , H04L63/0823 , H04L63/10 , H04L63/20 , H04L67/1097 , H04L67/16 , H04L67/2842
Abstract: Methods, apparatus, and computer-accessible storage media for activating a gateway to a remote service provider. The gateway serves as an interface between processes on a customer network and the provider, for example to store customer data to a remote data store. A gateway sends a public key and metadata describing the gateway to the provider. The gateway receives an activation key from the provider and exposes the activation key on the customer network. The customer obtains the key and communicates to the provider using the key to provide customer information including a name for the gateway and to authorize registration of the gateway. The provider provides the customer information to the gateway. The gateway requests security credentials from the provider using the customer information and the key. The provider sends a security credential to the gateway. The gateway may then obtain configuration information from the customer via the provider.
Abstract translation: 用于激活到远程服务提供商的网关的方法,装置和计算机可访问的存储介质。 网关用作客户网络和提供商之间的进程之间的接口,例如将客户数据存储到远程数据存储。 网关向提供商发送描述网关的公开密钥和元数据。 网关从提供商接收激活密钥,并在客户网络上公开激活密钥。 客户获得密钥并使用密钥向提供商进行通信,以提供客户信息,包括网关的名称并授权网关的注册。 提供商向网关提供客户信息。 网关使用客户信息和密钥从提供商请求安全凭证。 提供商向网关发送安全凭证。 然后,网关可以经由提供商从客户获得配置信息。
-
公开(公告)号:US20210400112A1
公开(公告)日:2021-12-23
申请号:US17466330
申请日:2021-09-03
Applicant: Amazon Technologies, Inc.
Inventor: James Christopher Sorenson, III , Yun Lin
IPC: H04L29/08 , G06F11/20 , G06F16/182
Abstract: Methods, apparatus, and computer-accessible storage media for providing redundant storage gateways. A client may create a storage gateway group and add storage gateways to the group. The client may assign one or more volumes on a remote data store to each the storage gateways in the group. Volume data for each storage gateway in the group may be replicated to at least one other storage gateway in the group. If one of the gateways in the group becomes unavailable, one or more other gateways in the group may take over volumes previously assigned to the unavailable gateway, using the replicated data in the group to seamlessly resume gateway operations for the respective volumes. Client processes that previously communicated with the unavailable gateway may be manually or automatically directed to the gateway(s) that are taking over the unavailable gateway's volumes.
-
公开(公告)号:US09916321B2
公开(公告)日:2018-03-13
申请号:US15056648
申请日:2016-02-29
Applicant: Amazon Technologies, Inc.
Inventor: Arun Sundaram , Yun Lin , David Carl Salyers
CPC classification number: G06F17/30174 , G06F3/0604 , G06F3/0622 , G06F3/0637 , G06F3/065 , G06F3/067 , G06F17/30088 , G06F17/30575 , G06F21/6218 , G06F21/78 , H04L29/06 , H04L67/1097
Abstract: Methods, apparatus, and computer-accessible storage media for controlling export of snapshots to external networks in service provider environments. Methods are described that may be used to prevent customers of a service provider from downloading snapshots of volumes, such as boot images created by the service provider or provided by third parties, to which the customer does not have the appropriate rights. A request may be received from a user to access one or more snapshots, for example a request to export the snapshot or a request for a listing of snapshots. For each snapshot, the service provider may determine if the user has rights to the snapshot, for example by checking a manifest for the snapshot to see if entries in the snapshot manifest belong to an account other than the customer's. If the user has rights to the snapshot, the request is granted; otherwise, the request is not granted.
-
公开(公告)号:US09659017B2
公开(公告)日:2017-05-23
申请号:US14474158
申请日:2014-08-31
Applicant: Amazon Technologies, Inc.
Inventor: James Christopher Sorenson, III , Yun Lin , Nishanth Alapati
CPC classification number: G06F17/30088 , G06F7/00 , G06F11/1448 , G06F17/30961 , H04L67/1097
Abstract: Methods, apparatus, and computer-accessible storage media for restoring data from a snapshot to a data volume. The blocks in the volume may be treated as an implicit tree structure, for example a binary tree; each local block corresponds to a block on the snapshot. A local block on the volume may be marked, for example fingerprinted with metadata, to indicate that the local block has not been restored. Initially, the local block at the root node is marked. To restore a local block, the restore process may generate a list indicating all local blocks on a path from the root node of the tree to the target node that have not been restored. The marks in the local blocks are used in generating the list. For each block indicated in the list, children of the block are fingerprinted, and the block is restored from the snapshot.
-
10.
公开(公告)号:US09275124B2
公开(公告)日:2016-03-01
申请号:US14336768
申请日:2014-07-21
Applicant: Amazon Technologies, Inc.
Inventor: Arun Sundaram , Yun Lin , David Carl Salyers
CPC classification number: G06F17/30174 , G06F3/0604 , G06F3/0622 , G06F3/0637 , G06F3/065 , G06F3/067 , G06F17/30088 , G06F17/30575 , G06F21/6218 , G06F21/78 , H04L29/06 , H04L67/1097
Abstract: Methods, apparatus, and computer-accessible storage media for controlling export of snapshots to external networks in service provider environments. Methods are described that may be used to prevent customers of a service provider from downloading snapshots of volumes, such as boot images created by the service provider or provided by third parties, to which the customer does not have the appropriate rights. A request may be received from a user to access one or more snapshots, for example a request to export the snapshot or a request for a listing of snapshots. For each snapshot, the service provider may determine if the user has rights to the snapshot, for example by checking a manifest for the snapshot to see if entries in the snapshot manifest belong to an account other than the customer's. If the user has rights to the snapshot, the request is granted; otherwise, the request is not granted.
Abstract translation: 方法,设备和计算机可访问的存储介质,用于控制服务提供商环境中的快照到外部网络的导出。 描述了可以用于防止服务提供商的客户下载卷的快照,诸如由服务提供商创建或由第三方提供的引导映像,客户不具有适当权限。 可以从用户接收到访问一个或多个快照的请求,例如导出快照的请求或快照列表的请求。 对于每个快照,服务提供商可以确定用户是否拥有快照的权限,例如通过检查快照的清单来查看快照清单中的条目是否属于除客户之外的其他帐户。 如果用户拥有快照权限,则授予该请求; 否则,请求不被授予。
-
-
-
-
-
-
-
-
-