公开(公告)号：US09774611B1

公开(公告)日：2017-09-26

申请号：US14204864

申请日：2014-03-11

Applicant: Amazon Technologies, Inc.

Inventor： Joseph Paul Zipperer ,  Andrew Bruce Dickinson ,  Kirk Arlo Petersen

IPC: H04L29/06 ,  G06F21/55 ,  G06F21/57

CPC classification number: H04L63/1408 ,  G06F21/552 ,  G06F21/554 ,  G06F21/57 ,  G06F21/85 ,  H04L63/0218 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0263 ,  H04L63/1441 ,  H04L63/1458 ,  H04L2463/141

Abstract: Functionality is disclosed herein for dynamically deploying an upstream network traffic filter in a network. The upstream network filter is dynamically deployed in a location that is closer to an entry point of an attack such that attack traffic reaches the upstream network filter before reaching a network traffic filter that is configured to perform network traffic filtering for a computing resource that is under attack. The upstream network traffic filter includes rules that are based on at least a portion of the rules that are applied by the network traffic filter.

公开(公告)号：US09847970B1

公开(公告)日：2017-12-19

申请号：US14266619

申请日：2014-04-30

Applicant: Amazon Technologies, Inc.

Inventor： Joseph Paul Zipperer ,  Andrew Bruce Dickinson ,  Kirk Arlo Petersen

IPC: H04L29/06

CPC classification number: H04L63/1458

Abstract: Functionality is disclosed herein for regulating bandwidth that is available for network traffic flowing through a data communications network. In response to attack traffic being detected, one or more traffic regulators are set to control an available bandwidth to be used by the attack traffic. The one or more traffic regulators are adjusted until an attack is no longer detected. After the attack ends, the traffic regulator may be disabled or set to a different mode of operation.

公开(公告)号：US10581728B1

公开(公告)日：2020-03-03

申请号：US14033157

申请日：2013-09-20

Applicant: Amazon Technologies, Inc.

Inventor： Joseph Paul Zipperer ,  Andrew Bruce Dickinson ,  Kirk Arlo Petersen

IPC: H04L12/721 ,  H04L29/06

Abstract: A method and apparatus for rate limiting network traffic are provided. A plurality of network devices may receive network traffic and route the network traffic to a destination. Rate limits may be imposed on the output rate of the plurality of network devices. The rate limits may be adjusted as the flow of the network traffic changes.