公开(公告)号：US20150249569A1

公开(公告)日：2015-09-03

申请号：US14715452

申请日：2015-05-18

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Ian R. Searle ,  Aaron C. Thompson ,  Kevin Christopher Miller

IPC: H04L12/24

CPC classification number: H04L41/0803 ,  H04L41/12 ,  H04L41/5051 ,  H04L41/5096 ,  H04L63/0227 ,  H04L63/104 ,  H04L67/16 ,  H04L67/288 ,  H04L67/38

Abstract: Techniques are described for providing managed computer networks. In some situations, the techniques include managing communications for computing nodes of a managed computer network by using one or more particular computing nodes of the managed computer network that are configured to operate as intermediate destinations to handle at least some communications that are sent by and/or directed to one or more other computing nodes of the managed computer network. For example, a manager module associated with a source computing node may select one or more particular intermediate destination computing nodes to use for one or more particular communications from the source computing node to an indicated final destination, such as based on a configured logical network topology for the managed computer network. The manager module then forwards those communications to a first of the selected intermediate destination computing nodes for further handling.

Abstract translation: 描述了提供托管计算机网络的技术。 在某些情况下，这些技术包括通过使用被管理计算机网络的一个或多个特定计算节点来管理被管理计算机网络的计算节点的通信，所述计算节点被配置为作为中间目的地来操作至少一些由 或被引导到被管理计算机网络的一个或多个其他计算节点。 例如，与源计算节点相关联的管理器模块可以选择一个或多个特定的中间目的地计算节点，以用于从源计算节点到指定的最终目的地的一个或多个特定通信，诸如基于配置的逻辑网络拓扑 用于托管计算机网络。 管理器模块然后将这些通信转发到所选择的中间目的地计算节点中的第一个，以便进一步处理。

公开(公告)号：US10382561B1

公开(公告)日：2019-08-13

申请号：US15269507

申请日：2016-09-19

Applicant: Amazon Technologies, Inc.

Inventor： Arijit Ganguly ,  Andrew B. Dickinson ,  Christopher J. Lefelhocz ,  Manish Agarwal ,  Ian R. Searle ,  Eric Jason Brandwine

IPC: H04L29/08 ,  H04L12/66 ,  H04L29/12 ,  H04L12/46 ,  H04L12/24

Abstract: A network gateway is implemented on behalf of a customer entity. The network gateway may be implemented using a distributed computer system and the network gateway may connect a network of the customer entity to a public communications network. The network gateway may include network-related services without the need for adding specialized hardware. The network gateway may be provisioned programmatically in response to instructions received from the customer entity. The network gateway may be provisionable and accessible over several different types of data connections. The network gateway, by virtue of being implemented on a distributed computer system, is scalable upon demand without additional input by the customer entity.

公开(公告)号：US09197610B1

公开(公告)日：2015-11-24

申请号：US14060396

申请日：2013-10-22

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Ian R. Searle

IPC: H04L29/06

CPC classification number: H04L63/06 ,  H04L61/103 ,  H04L61/15 ,  H04L63/0428 ,  H04L63/123

Abstract: Systems and methods provide logic for distributing cryptographic keys in a physical network comprising a plurality of physical nodes. In one implementation, a computer-implemented method is provided for distributing cryptographic keys in a physical network. The method includes receiving information mapping a virtual network address of a virtual node to a physical network address of a physical node. The virtual node may be associated with a virtual network hosted by the physical node, and the received mapping information identifies a virtual network address of the node and the physical network address of the node. The mapping service transmits a current version of a cryptographic key and an identifier of the current version to the physical node.

Abstract translation: 系统和方法提供用于在包括多个物理节点的物理网络中分发加密密钥的逻辑。 在一个实现中，提供了一种用于在物理网络中分发加密密钥的计算机实现的方法。 该方法包括接收将虚拟节点的虚拟网络地址映射到物理节点的物理网络地址的信息。 虚拟节点可以与由物理节点托管的虚拟网络相关联，并且所接收的映射信息标识节点的虚拟网络地址和节点的物理网络地址。 映射服务将当前版本的加密密钥和当前版本的标识符发送到物理节点。

公开(公告)号：US09037691B1

公开(公告)日：2015-05-19

申请号：US13942530

申请日：2013-07-15

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Ian R. Searle ,  Aaron C. Thompson ,  Kevin Christopher Miller

IPC: G06F15/16 ,  H04L29/08

CPC classification number: H04L41/0803 ,  H04L41/12 ,  H04L41/5051 ,  H04L41/5096 ,  H04L63/0227 ,  H04L63/104 ,  H04L67/16 ,  H04L67/288 ,  H04L67/38

Abstract: Techniques are described for providing managed computer networks. In some situations, the techniques include managing communications for computing nodes of a managed computer network by using one or more particular computing nodes of the managed computer network that are configured to operate as intermediate destinations to handle at least some communications that are sent by and/or directed to one or more other computing nodes of the managed computer network. For example, a manager module associated with a source computing node may select one or more particular intermediate destination computing nodes to use for one or more particular communications from the source computing node to an indicated final destination, such as based on a configured logical network topology for the managed computer network. The manager module then forwards those communications to a first of the selected intermediate destination computing nodes for further handling.

Abstract translation: 描述了提供托管计算机网络的技术。 在某些情况下，这些技术包括通过使用被管理计算机网络的一个或多个特定计算节点来管理被管理计算机网络的计算节点的通信，所述计算节点被配置为作为中间目的地来操作至少一些由 或被引导到被管理计算机网络的一个或多个其他计算节点。 例如，与源计算节点相关联的管理器模块可以选择一个或多个特定的中间目的地计算节点，以用于从源计算节点到指定的最终目的地的一个或多个特定通信，诸如基于配置的逻辑网络拓扑 用于托管计算机网络。 管理器模块然后将这些通信转发到所选择的中间目的地计算节点中的第一个，以便进一步处理。

公开(公告)号：US09876773B1

公开(公告)日：2018-01-23

申请号：US14949225

申请日：2015-11-23

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Ian R. Searle

IPC: H04L29/06

CPC classification number: H04L63/06 ,  H04L61/103 ,  H04L61/15 ,  H04L63/0428 ,  H04L63/123

Abstract: Systems and methods provide logic for distributing cryptographic keys in a physical network comprising a plurality of physical nodes. In one implementation, a computer-implemented method is provided for distributing cryptographic keys in a physical network. The method includes receiving information mapping a virtual network address of a virtual node to a physical network address of a physical node. The virtual node may be associated with a virtual network hosted by the physical node, and the received mapping information identifies a virtual network address of the node and the physical network address of the node. The mapping service transmits a current version of a cryptographic key and an identifier of the current version to the physical node.

公开(公告)号：US09794116B2

公开(公告)日：2017-10-17

申请号：US14715452

申请日：2015-05-18

Applicant: Amazon Technologies, Inc.

Inventor： Eric Jason Brandwine ,  Ian R. Searle ,  Aaron C. Thompson ,  Kevin Christopher Miller

IPC: G06F15/16 ,  H04L12/24 ,  H04L29/06 ,  H04L29/08

CPC classification number: H04L41/0803 ,  H04L41/12 ,  H04L41/5051 ,  H04L41/5096 ,  H04L63/0227 ,  H04L63/104 ,  H04L67/16 ,  H04L67/288 ,  H04L67/38

Abstract: Techniques are described for providing managed computer networks. In some situations, the techniques include managing communications for computing nodes of a managed computer network by using one or more particular computing nodes of the managed computer network that are configured to operate as intermediate destinations to handle at least some communications that are sent by and/or directed to one or more other computing nodes of the managed computer network. For example, a manager module associated with a source computing node may select one or more particular intermediate destination computing nodes to use for one or more particular communications from the source computing node to an indicated final destination, such as based on a configured logical network topology for the managed computer network. The manager module then forwards those communications to a first of the selected intermediate destination computing nodes for further handling.