公开(公告)号：US09832118B1

公开(公告)日：2017-11-28

申请号：US14542513

申请日：2014-11-14

Applicant: Amazon Technologies, Inc.

Inventor： Kevin Christopher Miller ,  Andrew Bruce Dickinson ,  Eric Wayne Schultze ,  Ian Roger Searle ,  Shane Ashley Hall ,  Deepak Mohan ,  David Brian Lennon

IPC: H04L12/713 ,  H04L12/741 ,  H04L12/46 ,  H04L29/06

CPC classification number: H04L45/586 ,  H04L45/74 ,  H04L45/745 ,  H04L63/0236 ,  H04L63/0272 ,  H04L63/101

Abstract: Methods and apparatus that allow clients to connect resource instances to virtual networks in provider network environments via private IP. Via private IP linking methods and apparatus, a client of a provider network can establish private IP communications between the client's resource instances on the provider network and the client's resource instances provisioned in the client's virtual network via links from the private IP address space of the virtual network to the private IP address space of the provider network. The provider network client resource instances remain part of the client's provider network implementation and may thus also communicate with other resource instances on the provider network and/or with entities on external networks via public IP while communicating with the virtual network resource instances via private IP.

公开(公告)号：US20210152487A1

公开(公告)日：2021-05-20

申请号：US16953203

申请日：2020-11-19

Applicant: Amazon Technologies, Inc.

Inventor： Eric W. Schultze ,  Aaron C. Thompson ,  Arijit Ganguly ,  Padmini C. Iyer ,  Tobias L. Holgers ,  Christopher J. Lefelhocz ,  Ian Roger Searle

IPC: H04L12/911 ,  H04L29/12 ,  H04L12/24 ,  H04L29/06

Abstract: Methods and apparatus for interfaces to manage virtual network interface objects. A system may include resource instances and a network interface virtualization coordinator. Responsive to a record creation request, the coordinator creates an interface records that may include an IP address, subnet information and security properties. The coordinator may, in response to a request to attach the record to a resource instance, enable traffic directed to the IP address to flow to the resource instance. In response to a subsequent detach request, the traffic to the IP address may be disabled at the resource instance. The same interface record may be attached to another resource instance in response to another attach request, enabling traffic directed to the IP address to flow to the second resource instance.

公开(公告)号：US20190356587A1

公开(公告)日：2019-11-21

申请号：US16530881

申请日：2019-08-02

Applicant: Amazon Technologies, Inc.

Inventor： Kevin Christopher Miller ,  Andrew Bruce Dickinson ,  Eric Wayne Schultze ,  Ian Roger Searle ,  Shane Ashley Hall ,  Deepak Mohan ,  David Brian Lennon

IPC: H04L12/713 ,  H04L29/06 ,  H04L12/741

Abstract: Methods and apparatus that allow clients to connect resource instances to virtual networks in provider network environments via private IP. Via private IP linking methods and apparatus, a client of a provider network can establish private IP communications between the client's resource instances on the provider network and the client's resource instances provisioned in the client's virtual network via links from the private IP address space of the virtual network to the private IP address space of the provider network. The provider network client resource instances remain part of the client's provider network implementation and may thus also communicate with other resource instances on the provider network and/or with entities on external networks via public IP while communicating with the virtual network resource instances via private IP.

公开(公告)号：US20150082428A1

公开(公告)日：2015-03-19

申请号：US14551819

申请日：2014-11-24

Applicant: Amazon Technologies, Inc.

Inventor： Aaron Douglas Dokey ,  Ian Roger Searle ,  Eric Jason Brandwine

IPC: H04L29/06

CPC classification number: H04L63/1408 ,  G06F21/50 ,  G06F21/554

Abstract: The behavior of a group of resources, such as a fleet of servers, can be monitored to attempt to determine a baseline of acceptable behaviors. When a behavior is observed, the baseline can be consulted to determine whether the behavior is indicated to be acceptable. If not, the rate or extent at which the newly observed behavior is observed on groupings of similar resources can be monitored. This information can be used to determine whether the behavior is acceptable in which case information for the observed behavior can be used to automatically update the baseline such that the baseline is representative of current acceptable behavior within the group of resources.

Abstract translation: 可以监视一组资源（例如服务器队列）的行为，以尝试确定可接受行为的基准。 当观察到行为时，可以查阅基线以确定行为是否被指示为可接受的。 如果没有，可以监测在类似资源分组中观察到新观察到的行为的速度或程度。 该信息可以用于确定行为是否可接受，在哪种情况下，可以使用观察到的行为的信息来自动更新基线，使得基线代表资源组内当前可接受的行为。

公开(公告)号：US08959633B1

公开(公告)日：2015-02-17

申请号：US13828265

申请日：2013-03-14

Applicant: Amazon Technologies, Inc.

Inventor： Aaron Douglas Dokey ,  Ian Roger Searle ,  Eric Jason Brandwine

IPC: G06F21/32 ,  G06F21/50

CPC classification number: H04L63/1408 ,  G06F21/50 ,  G06F21/554

Abstract: The behavior of a group of resources, such as a fleet of servers, can be monitored to attempt to determine a baseline of acceptable behaviors. When a behavior is observed, the baseline can be consulted to determine whether the behavior is indicated to be acceptable. If not, the rate or extent at which the newly observed behavior is observed on groupings of similar resources can be monitored. This information can be used to determine whether the behavior is acceptable in which case information for the observed behavior can be used to automatically update the baseline such that the baseline is representative of current acceptable behavior within the group of resources.

Abstract translation: 可以监视一组资源（例如服务器队列）的行为，以尝试确定可接受行为的基准。 当观察到行为时，可以查阅基线以确定行为是否被指示为可接受的。 如果没有，可以监测在类似资源分组中观察到新观察到的行为的速度或程度。 该信息可用于确定行为是否可接受，在哪种情况下，可以使用观察到的行为的信息来自动更新基线，使得基线代表资源组内当前可接受的行为。

公开(公告)号：US11509577B2

公开(公告)日：2022-11-22

申请号：US16530881

申请日：2019-08-02

Applicant: Amazon Technologies, Inc.

Inventor： Kevin Christopher Miller ,  Andrew Bruce Dickinson ,  Eric Wayne Schultze ,  Ian Roger Searle ,  Shane Ashley Hall ,  Deepak Mohan ,  David Brian Lennon

IPC: H04L45/586 ,  H04L45/74 ,  H04L45/02 ,  H04L9/40 ,  H04L45/745

Abstract: Methods and apparatus that allow clients to connect resource instances to virtual networks in provider network environments via private IP. Via private IP linking methods and apparatus, a client of a provider network can establish private IP communications between the client's resource instances on the provider network and the client's resource instances provisioned in the client's virtual network via links from the private IP address space of the virtual network to the private IP address space of the provider network. The provider network client resource instances remain part of the client's provider network implementation and may thus also communicate with other resource instances on the provider network and/or with entities on external networks via public IP while communicating with the virtual network resource instances via private IP.

公开(公告)号：US11218420B2

公开(公告)日：2022-01-04

申请号：US16953203

申请日：2020-11-19

Applicant: Amazon Technologies, Inc.

Inventor： Eric W. Schultze ,  Aaron C. Thompson ,  Arijit Ganguly ,  Padmini C. Iyer ,  Tobias L. Holgers ,  Christopher J. Lefelhocz ,  Ian Roger Searle

IPC: H04L12/911 ,  H04L29/12 ,  H04L12/24 ,  G06F9/50 ,  H04L29/06

Abstract: Methods and apparatus for interfaces to manage virtual network interface objects. A system may include resource instances and a network interface virtualization coordinator. Responsive to a record creation request, the coordinator creates an interface records that may include an IP address, subnet information and security properties. The coordinator may, in response to a request to attach the record to a resource instance, enable traffic directed to the IP address to flow to the resource instance. In response to a subsequent detach request, the traffic to the IP address may be disabled at the resource instance. The same interface record may be attached to another resource instance in response to another attach request, enabling traffic directed to the IP address to flow to the second resource instance.

公开(公告)号：US20170262300A1

公开(公告)日：2017-09-14

申请号：US15430957

申请日：2017-02-13

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Aaron Douglas Dokey ,  Ajith Jayamohan ,  Ian Roger Searle

IPC: G06F9/455 ,  G06F12/14 ,  H04L12/26 ,  H04L29/06 ,  H04L12/851

CPC classification number: G06F9/455 ,  G06F9/45533 ,  G06F9/45558 ,  G06F12/14 ,  G06F2009/45591 ,  G06F2009/45595 ,  H04L29/06877 ,  H04L43/026 ,  H04L43/028 ,  H04L43/04 ,  H04L43/045 ,  H04L43/16 ,  H04L47/2441 ,  H04L63/0227 ,  H04L63/14 ,  H04L63/1408 ,  H04L63/1425 ,  H04L63/1458

Abstract: Approaches are described for collecting and/or utilizing network traffic information, such as network flow data, within a virtualized computing environment. The network traffic information can be collected on one or more host computing devices that host virtual machines. The collected network traffic information can include virtualized computing environment specific information, such as a user account identifier (ID), virtual machine identifier (ID), session termination information and the like. The collected network traffic information can also be presented to the user of the virtualized computing environment.

公开(公告)号：US09369403B2

公开(公告)日：2016-06-14

申请号：US14517568

申请日：2014-10-17

Applicant: Amazon Technologies, Inc.

Inventor： Eric W. Schultze ,  Aaron C. Thompson ,  Arijit Ganguly ,  Padmini C. Iyer ,  Tobias L. Holgers ,  Christopher J. Lefelhocz ,  Ian Roger Searle

IPC: G06F15/173 ,  H04L12/911 ,  H04L29/06 ,  H04L12/24 ,  H04L29/12

CPC classification number: H04L47/70 ,  H04L41/00 ,  H04L41/50 ,  H04L61/2007 ,  H04L61/304 ,  H04L61/6068 ,  H04L63/20

Abstract: Methods and apparatus for interfaces to manage virtual network interface objects. A system may include resource instances and a network interface virtualization coordinator. Responsive to a record creation request, the coordinator creates an interface records that may include an IP address, subnet information and security properties. The coordinator may, in response to a request to attach the record to a resource instance, enable traffic directed to the IP address to flow to the resource instance. In response to a subsequent detach request, the traffic to the IP address may be disabled at the resource instance. The same interface record may be attached to another resource instance in response to another attach request, enabling traffic directed to the IP address to flow to the second resource instance.

Abstract translation: 用于管理虚拟网络接口对象的接口的方法和设备。 系统可以包括资源实例和网络接口虚拟化协调器。 响应于记录创建请求，协调器创建可以包括IP地址，子网信息和安全属性的接口记录。 协调器可以响应于将记录附加到资源实例的请求，使得指向IP地址的流量流向资源实例。 响应于后续的分离请求，可能在资源实例处禁用到IP地址的流量。 响应于另一附加请求，可以将相同的接口记录附加到另一资源实例，使得指向IP地址的流量能够流向第二资源实例。