-
公开(公告)号:US20230164059A1
公开(公告)日:2023-05-25
申请号:US17456549
申请日:2021-11-24
Applicant: Amazon Technologies, Inc.
Inventor: Anoop Dawani , Bashuman Deb , Baihu Qian , Omer Hashmi , Nick Matthews , Shridhar Kulkarni , Thomas Nguyen Spendley , Indira Radhika Pulla , David Jonathan Adams , Nicholas Ryan Lombardi , Brandon Michael LaRue , Aaron Scott DeBruin , Ramin Ali Dousti
CPC classification number: H04L45/04 , H04L45/306 , H04L45/566 , H04L45/44 , H04L45/02 , H04L63/0272
Abstract: Systems and methods are provided for management of network segments that cross geographic regions and/or other types of network divisions in a cloud-based network environment. Gateway may manage traffic across regions using routing metadata that includes a segment identifier. The gateways may also signal their routes across regions based on segment data, and implement the signaled routes using segment-based routing policies. Route selection may be performed using optimization data.
-
公开(公告)号:US20200162383A1
公开(公告)日:2020-05-21
申请号:US16196709
申请日:2018-11-20
Applicant: Amazon Technologies, Inc.
Inventor: Bashuman Deb , Paul John Tillotson , Thomas Nguyen Spendley , Omer Hashmi , Baihu Qian , Mohamed Nader Farahat Hassan
IPC: H04L12/741 , H04L12/931 , H04L12/721 , H04L12/751 , H04L29/08 , H04L29/06 , G06F9/455
Abstract: At an action implementation layer of a virtual traffic hub, a packet is obtained from a first isolated network. A first action, generated at a decision making layer of the hub based on a first route table of the hub, is performed, resulting in transmission of at least one network packet to a first destination. In response to a second packet, obtained at the action implementation layer from a source outside the first isolated network, a second action is performed, resulting in transmission of at least one packet to a second destination. The second action is generated based on a second route table of the hub.
-
公开(公告)号:US20250126046A1
公开(公告)日:2025-04-17
申请号:US18986588
申请日:2024-12-18
Applicant: Amazon Technologies, Inc.
Inventor: Bashuman Deb , Paul John Tillotson , Thomas Nguyen Spendley , Omer Hashmi , Baihu Qian , Mohamed Nader Farahat Hassan
Abstract: Network pathways are identified to transfer packets between a pair of regional virtual traffic hubs of a provider network. At a first hub of the pair, a first action is performed, resulting in a transmission of a packet received from a first isolated network to the second hub along a pathway selected using dynamic routing parameters. At the second hub, a second action is performed, resulting in the transmission of the packet to a destination within a second isolated network.
-
公开(公告)号:US12160366B2
公开(公告)日:2024-12-03
申请号:US17218039
申请日:2021-03-30
Applicant: Amazon Technologies, Inc.
Inventor: Bashuman Deb , Omer Hashmi , Thomas Nguyen Spendley , Baihu Qian , Guru Kannan , Shridhar Kulkarni , Paul John Tillotson , Ramin Ali Dousti , Indira Radhika Pulla , Yuxin Ren , Fahed Hijazi , Xiyuan Gou , Steve Ge , Nicholas Ryan Lombardi , Brandon Michael LaRue , Jaywant U. Kapadnis , Anoop Dawani
IPC: H04L45/586 , H04L45/74 , H04L65/102 , H04L69/12 , H04L69/326
Abstract: A message indicating an auxiliary task associated with traffic transmitted via a virtual router between a pair of isolated networks is received at an offloading device. A stack multiplexer at the offloading device selects a protocol stack instance to process the message. A result of the auxiliary task is obtained by the multiplexer from the selected protocol stack instance and transmitted to the virtual router, where it is used to transmit a packet between the isolated networks.
-
公开(公告)号:US20230164076A1
公开(公告)日:2023-05-25
申请号:US17456548
申请日:2021-11-24
Applicant: Amazon Technologies, Inc.
Inventor: Anoop Dawani , Bashuman Deb , Baihu Qian , Omer Hashmi , Nick Matthews , Shridhar Kulkarni , Thomas Nguyen Spendley , Steve Ge , Justin Lin Hsieh , Guru Kannan , Alok Mishra
IPC: H04L45/745 , H04L12/46 , H04L12/66
CPC classification number: H04L45/745 , H04L12/4641 , H04L12/66
Abstract: Systems and methods are provided for management of network segments that cross geographic regions and/or other types of network divisions in a cloud-based network environment. A cloud-based network provider's geographically-dispersed network infrastructure may serve as the core of a client's private wide area network, and the client may define isolated segments to which other networks (virtual private clouds, virtual private networks, etc.) may be attached. The various segments may remain logically isolated from each other even when implemented across some or all of the same regions—and using the same physical and/or virtual routing components—as other segments of the same client and/or other clients.
-
公开(公告)号:US11336528B2
公开(公告)日:2022-05-17
申请号:US16699446
申请日:2019-11-29
Applicant: Amazon Technologies, Inc.
Inventor: Baihu Qian , Bashuman Deb , Omer Hashmi , Thomas Nguyen Spendley , Nikhil Reddy Cheruku , Alok Mishra , Alexander Justin Penney
IPC: H04L12/24 , H04L41/12 , H04L41/0681 , H04L12/46 , H04L43/026 , H04L41/22 , H04L43/087 , H04L41/5009 , H04L43/0829 , H04L41/5003 , H04L43/0852 , H04L43/00 , H04L43/16
Abstract: This disclosure describes techniques for configuring and managing scalable global private networks associated with a service provider. Different input mechanisms, such as an API, a UI, or a CLI may be utilized to configure, and manage a global private network that spans across the cloud in different geographic locations and connects to different stand-alone networks. The user may proactively use the input mechanisms to configure and query different network resources to reactively configure settings for reacting to one or more events. The input mechanisms may also be utilized to define the network resources to be modeled within the global private network as well as connections within the global network. A user may configure events/metrics to be monitored, tasks/workflows to be performed, and the like. In some configurations, a network management service (NMS) may perform health monitoring and reachability monitoring to identify possible issues in the global network.
-
公开(公告)号:US11310155B1
公开(公告)日:2022-04-19
申请号:US17218024
申请日:2021-03-30
Applicant: Amazon Technologies, Inc.
Inventor: Baihu Qian , Omer Hashmi , Thomas Nguyen Spendley , Bashuman Deb , Guru Kannan , Paul John Tillotson , Ramin Ali Dousti , Indira Radhika Pulla , Fahed Hijazi , Xiyuan Gou , Steve Ge , Yuxin Ren , Brandon Michael LaRue , Jaywant U Kapadnis
IPC: H04L12/713 , H04L45/586 , H04L45/12 , H04L43/0864 , H04L47/762 , H04L65/102 , H04L47/125
Abstract: A category of auxiliary tasks (such as routing configuration management or packet content transformation) associated with transmission of network packets between sets of network endpoints is determined. A virtual router is configured to transmit the packets between the sets of network endpoints. Connectivity is enabled between the virtual router and an auxiliary task offloading resource. Results of an auxiliary task performed at the offloading resource are used to transmit at least some packets between the sets of network endpoints.
-
公开(公告)号:US20200162362A1
公开(公告)日:2020-05-21
申请号:US16196717
申请日:2018-11-20
Applicant: Amazon Technologies, Inc.
Inventor: Bashuman Deb , Paul John Tillotson , Thomas Nguyen Spendley , Omer Hashmi , Baihu Qian , Mohamed Nader Farahat Hassan
IPC: H04L12/715 , H04L12/721
Abstract: Network pathways are identified to transfer packets between a pair of regional virtual traffic hubs of a provider network. At a first hub of the pair, a first action is performed, resulting in a transmission of a packet received from a first isolated network to the second hub along a pathway selected using dynamic routing parameters. At the second hub, a second action is performed, resulting in the transmission of the packet to a destination within a second isolated network.
-
公开(公告)号:US20240333775A1
公开(公告)日:2024-10-03
申请号:US18741445
申请日:2024-06-12
Applicant: Amazon Technologies, Inc.
Inventor: Baihu Qian , Bashuman Deb , Justin Lin Hsieh , Daniel William Dacosta , Nick Matthews , Viktor Heorhiadi , Lalith Kumar Ramamoorthi , Anoop Dawani , Omer Hashmi , Thomas Nguyen Spendley
IPC: H04L9/40 , H04L12/46 , H04L41/0893 , H04L45/24 , H04L47/20
CPC classification number: H04L63/205 , H04L12/4675 , H04L41/0893 , H04L45/24 , H04L47/20 , H04L63/0272
Abstract: Systems and methods are provided for obtaining policy data associated with a private network implemented at least partly within a cloud provider network; establishing, based on the policy data, a first segment within the private network, wherein in a first geographic region of the cloud provider network, traffic associated with the first segment is isolated from traffic associated with a second segment of the private network, and wherein in a second geographic region of the cloud provider network, traffic associated with the first segment is isolated from traffic associated with a third segment of the private network; obtaining metadata indicating an isolated network of the cloud provider network is associated with the first segment; and enabling the isolated network to communicate, over the first segment, across the first geographic region and the second geographic region.
-
公开(公告)号:US12021902B1
公开(公告)日:2024-06-25
申请号:US17643769
申请日:2021-12-10
Applicant: Amazon Technologies, Inc.
Inventor: Baihu Qian , Bashuman Deb , Justin Lin Hsieh , Daniel William Dacosta , Nick Matthews , Viktor Heorhiadi , Lalith Kumar Ramamoorthi , Anoop Dawani , Omer Hashmi , Thomas Nguyen Spendley
CPC classification number: H04L63/205 , H04L12/4675 , H04L41/0893 , H04L45/24 , H04L47/20 , H04L63/0272
Abstract: Systems and methods are provided for evaluation of communication paths through networks to determine whether communication is permitted across one or more internal network boundaries. The analysis may be used to determine whether a node in one isolated network (e.g., VPC, VPN, client on-premise network, etc.) is able to communicate with a node in another isolated network across region and/or segment boundaries. The automated analysis can allow users (e.g., network administrators) to see what high-level policies (e.g., Cloud WAN policies written in a declarative language) are interfering with or permitting communication between the nodes.
-
-
-
-
-
-
-
-
-