公开(公告)号：US20130204971A1

公开(公告)日：2013-08-08

申请号：US13829721

申请日：2013-03-14

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Clarissa Loree Cook Brandwine ,  Daniel T. Cohn ,  Andrew J. Doane ,  Carl J. Moses ,  Stephen E. Schmidt

IPC: H04L12/24

Abstract: Techniques are described for providing users with access to computer networks, such as to enable users to interact with a remote configurable network service in order to create and configure computer networks that are provided by the configurable network service for use by the users. Computer networks provided by the configurable network service may be configured to be private computer networks that are accessible only by the users who create them, and may each be created and configured by a client of the configurable network service to be an extension to an existing computer network of the client, such as a private computer network extension to an existing private computer network of the client. If so, secure private access between an existing computer network and new computer network extension that is being provided may be enabled using one or more VPN connections or other private access mechanisms.

Abstract translation: 描述了为用户提供对计算机网络的访问的技术，例如使用户能够与远程可配置网络服务进行交互，以便创建和配置由可配置网络服务提供以供用户使用的计算机网络。 由可配置网络服务提供的计算机网络可以被配置为只能由创建它们的用户访问的专用计算机网络，并且每个可以由可配置网络服务的客户端创建和配置成为现有计算机的扩展 客户端的网络，如私有计算机网络扩展到客户端的现有专用计算机网络。 如果是这样，可以使用一个或多个VPN连接或其他私人访问机制来启用现有计算机网络和正在提供的新的计算机网络分机之间的安全私人访问。

公开(公告)号：US11595113B1

公开(公告)日：2023-02-28

申请号：US17008927

申请日：2020-09-01

Applicant: AMAZON TECHNOLOGIES, INC.

Inventor： Andrew B. Dickinson ,  Daniel T. Cohn ,  Richard H. Galliher

IPC: H04B7/185 ,  H04B7/204 ,  H04B7/195

Abstract: Satellites provide communication between devices such as user terminals (UTs) and ground stations that are connected to points-of-presence (PoP) connected to other networks, such as the Internet. The PoP accepts downstream data addressed to the UT. A representation of the communication resources that are expected to be used to pass the downstream data from the PoP to the UT is determined and executed on one or more processors. The representations may include representations of traffic shapers, modems, and so forth at different points in the network. The representations may consider real-world and simulated feedback data. Within the representation, traffic shaping is employed to determine preshaped data that includes resource metadata designating the communication resources to be used. The preshaped data is passed along to the actual communication resources for subsequent delivery. The preshaping substantially improves performance of constrained communication resources. The preshaped data may be reshaped as real-world conditions change.

公开(公告)号：US11477076B2

公开(公告)日：2022-10-18

申请号：US17459955

申请日：2021-08-27

Applicant: Amazon Technologies, Inc.

Inventor： Daniel T. Cohn ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: G06F15/177 ,  H04L41/0803 ,  G06F9/455 ,  H04L67/10 ,  H04L45/02 ,  H04L12/46 ,  H04L41/0806 ,  H04L41/12 ,  H04L45/00 ,  G06F9/50 ,  H04L61/10 ,  H04L41/0893 ,  H04L41/0213

Abstract: Techniques are described for providing logical networking functionality for managed computer networks, such as for virtual computer networks provided on behalf of users or other entities. In some situations, a user may configure or otherwise specify a network topology for a virtual computer network, such as a logical network topology that separates multiple computing nodes of the virtual computer network into multiple logical sub-networks and/or that specifies one or more logical networking devices for the virtual computer network. After a network topology is specified for a virtual computer network, logical networking functionality corresponding to the network topology may be provided in various manners, such as without physically implementing the network topology for the virtual computer network. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

公开(公告)号：US10084697B2

公开(公告)日：2018-09-25

申请号：US15351320

申请日：2016-11-14

Applicant: Amazon Technologies, Inc.

Inventor： Alan Michael Judge ,  David J. O'Meara ,  Daniel T. Cohn

IPC: H04L12/46 ,  H04L12/741 ,  H04L12/775 ,  H04L12/24 ,  H04L29/06

CPC classification number: H04L45/54 ,  H04L12/4633 ,  H04L41/12 ,  H04L45/58 ,  H04L69/16

Abstract: Methods and apparatus for Internet-scale routing using small-scale border routers and IP tunneling are described. Each border router is directly connected to a transit provider. Routing protocol peerings may be passed via the border routers through tunnels to a routing service; the routing service and the transit provider router(s) appear to be directly adjacent routing peers. The routing service receives routing data from the transit provider(s), maintains the routing data in a routing table, and processes the routing data in the routing table to select best paths. A mapping service may be informed, by the routing service, of a best exit point (or points) for each Internet prefix of each packet to be routed on the Internet. Outbound packets from devices on the network to the Internet, and inbound packets from the Internet to the network devices, may be encapsulated and passed through tunnels as directed by the mapping service.

公开(公告)号：US20180131634A1

公开(公告)日：2018-05-10

申请号：US15804866

申请日：2017-11-06

Applicant: Amazon Technologies, Inc.

Inventor： Alan M. Judge ,  Mark N. Kelly ,  Jagwinder Singh Brar ,  Michael David Marr ,  Daniel T. Cohn

IPC: H04L12/933 ,  H04L12/931 ,  H04L12/46 ,  H04L12/775

CPC classification number: H04L49/15 ,  H04L12/46 ,  H04L12/4625 ,  H04L45/58 ,  H04L49/356 ,  H04L49/40 ,  H04L49/45 ,  H04L49/70

Abstract: The deployment and scaling of a network of electronic devices can be improved by utilizing one or more network transpose boxes. Each transpose box can include a number of connectors and a meshing useful for implementing a specific network topology. Different tiers of a network can be connected to one or more of the network transpose boxes, and operated as a logical switch. A control server can be used to manage the control plane operations of the logical switch.

公开(公告)号：US09705792B2

公开(公告)日：2017-07-11

申请号：US13691497

申请日：2012-11-30

Applicant: Amazon Technologies, Inc.

Inventor： Daniel T. Cohn

IPC: H04L12/713 ,  H04L12/24 ,  H04L29/12 ,  H04L29/06

CPC classification number: H04L45/586 ,  H04L29/12028 ,  H04L29/12358 ,  H04L29/12801 ,  H04L41/00 ,  H04L41/28 ,  H04L61/103 ,  H04L61/2007 ,  H04L61/251 ,  H04L61/6004 ,  H04L63/20 ,  H04W12/06

Abstract: Techniques are described for managing communications between multiple computing nodes, such as computing nodes that are separated by one or more physical networks. In some situations, the techniques may be used to provide a virtual network between multiple computing nodes that are separated by one or more intermediate physical networks, such as from the edge of the one or more intermediate physical networks by modifying communications that enter and/or leave the intermediate physical networks. In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users (e.g., users of a program execution service). The managing of the communications may include determining whether communications sent to managed computing nodes are authorized, and providing the communications to the computing nodes only if they are determined to be authorized.

公开(公告)号：US09356860B1

公开(公告)日：2016-05-31

申请号：US14144407

申请日：2013-12-30

Applicant: Amazon Technologies, Inc.

Inventor： Andrew B. Dickinson ,  Daniel T. Cohn

IPC: H04L12/743 ,  H04L9/06 ,  H04L29/08 ,  H04L12/715

CPC classification number: H04L45/64 ,  H04L9/0643 ,  H04L45/7453 ,  H04L67/025 ,  H04L67/1023 ,  H04L67/1097 ,  H04L67/2861

Abstract: Techniques are described for providing managed computer networks. In some situations, the techniques include managing communications for computing nodes of a managed computer network by using a pool of multiple alternative intermediate destinations to forward at least some communications to other final destinations. For example, a manager module associated with a source computing node may select a particular one of multiple alternative intermediate destinations to use for one or more particular communications from the source computing node to an indicated final destination, such as based on network addresses associated with the source computing node and/or the final destination. The multiple alternative intermediate destinations may have various forms, including multiple alternative edge devices at a first location at which various computing nodes are co-located that operate to manage communications between those co-located computing nodes at the first location and other external computer systems at one or more other locations.

Abstract translation: 描述了提供托管计算机网络的技术。 在某些情况下，这些技术包括通过使用多个替代中间目的地的池来管理被管理计算机网络的计算节点的通信，以将至少一些通信转发到其他最终目的地。 例如，与源计算节点相关联的管理器模块可以选择多个替代中间目的地中的特定一个，以用于从源计算节点到所指示的最终目的地的一个或多个特定通信，诸如基于与 源计算节点和/或最终目的地。 多个替代的中间目的地可以具有各种形式，包括在第一位置处的多个替代边缘设备，在该第一位置处，各种计算节点位于同一位置，其操作以管理在第一位置处的那些共处的计算节点与其他外部计算机系统之间的通信 一个或多个其他位置。

公开(公告)号：US08937960B2

公开(公告)日：2015-01-20

申请号：US14265159

申请日：2014-04-29

Applicant: Amazon Technologies, Inc.

Inventor： Daniel T. Cohn ,  Eric Jason Brandwine ,  Andrew J. Doane

IPC: H04L12/28 ,  H04L12/24 ,  H04L29/12 ,  H04L29/06 ,  H04W4/02 ,  H04W80/04

CPC classification number: H04L41/0816 ,  G06F9/45533 ,  H04L41/50 ,  H04L61/103 ,  H04L61/251 ,  H04L69/167 ,  H04W4/02 ,  H04W80/045

Abstract: Techniques are described for managing communications between multiple computing nodes, such as computing nodes that are part of a virtual computer network. In some situations, various types of modifications may be made to one or more computing nodes of an existing virtual computer network, and the described techniques include managing ongoing communications for those computing nodes so as to accommodate the modifications. Such modifications may include, for example, migrating or otherwise moving a particular computing node that is part of a virtual network to a new physical network location, or modifying other aspects of how the computing node participates in the virtual network (e.g., changing one or more virtual network addresses used by the computing node). In some situations, the computing nodes may include virtual machine nodes hosted on one or more physical computing machines or systems, such as by or on behalf of one or more users.

Abstract translation: 描述了用于管理多个计算节点（例如作为虚拟计算机网络的一部分的计算节点）之间的通信的技术。 在一些情况下，可以对现有虚拟计算机网络的一个或多个计算节点进行各种类型的修改，并且所描述的技术包括管理那些计算节点的持续通信，以便适应这些修改。 这样的修改可以包括例如将作为虚拟网络的一部分的特定计算节点迁移或以其他方式移动到新的物理网络位置，或修改计算节点如何参与虚拟网络的其他方面（例如，改变一个或多个 计算节点使用更多的虚拟网络地址）。 在一些情况下，计算节点可以包括托管在一个或多个物理计算机或系统上的虚拟机节点，诸如由一个或多个用户代表或代表一个或多个用户。