公开(公告)号：US11296981B2

公开(公告)日：2022-04-05

申请号：US16450720

申请日：2019-06-24

Applicant: Amazon Technologies, Inc.

Inventor： Stewart Allen ,  Andrew Davenport ,  Ciprian Dan Cosma ,  Anthony Nicholas Liguori ,  Joseph Elmar Magerramov ,  Nachiappan Arumugam

IPC: H04L12/721 ,  H04L45/00 ,  H04L47/70 ,  G06F9/455

Abstract: Indications of packet processing operations to be performed for packets of a resource group, as well as configuration settings of the group, are obtained. A packet that satisfies a requirement of the configuration settings and meets a fast path criterion is processed at a fast path node configured for the group. In response to determining that another packet does not satisfy a criterion for fast path processing, the other packet is transmitted to an exception path target.

公开(公告)号：US11206181B1

公开(公告)日：2021-12-21

申请号：US17023844

申请日：2020-09-17

Applicant: Amazon Technologies, Inc.

Inventor： David James Goodell ,  Andrew Davenport ,  Benjamin Serebrin ,  James Watson ,  Ariana Meika Morgan ,  Rajeevardhan Gopalan

IPC: H04L12/24 ,  H04L12/911 ,  H04L29/08 ,  H04L12/927 ,  G06F9/455 ,  G06F9/50 ,  H04L29/06 ,  H04L12/919 ,  G06F9/48

Abstract: Techniques for safe oversubscription of connection tracking entries are described. A method for safe oversubscription of connection tracking entries may include receiving a request for an allocation of a resource on a physical host in a provider network, the request received by a resource allocation monitor from an instance hosted by the physical host, determining a resource availability on the physical host, the resource availability based on a total amount of the resource on the physical host, a reserved amount of the resource to a plurality of instances hosted by the physical host, and a shared amount of the resource, and granting or denying the resource allocation based at least on the determined resource availability.

公开(公告)号：US11088944B2

公开(公告)日：2021-08-10

申请号：US16450690

申请日：2019-06-24

Applicant: Amazon Technologies, Inc.

Inventor： Stewart Allen ,  Andrew Davenport ,  Ciprian Dan Cosma ,  Anthony Nicholas Liguori ,  Joseph Elmar Magerramov

IPC: H04L12/703 ,  H04L12/935 ,  H04L12/747 ,  H04L29/06 ,  H04L12/707

Abstract: A program to be executed to perform a packet processing operation on a packet associated with a resource group, as well as security settings of the resource group, are received. The program is transmitted to a set of fast path nodes which were assigned to the resource group based on the group's metadata. With respect to a particular packet, security operations based on the settings are performed and the program is executed at a fast path node. Based at least partly on the results of the program, a packet routing action corresponding to the received packet is performed.