公开(公告)号：US11831611B2

公开(公告)日：2023-11-28

申请号：US16785211

申请日：2020-02-07

Applicant: Amazon Technologies, Inc.

Inventor： Po-Chun Chen ,  Omer Hashmi ,  Sanjay Bhal

IPC: H04L9/40 ,  H04L67/10 ,  H04L12/66 ,  H04L12/46

CPC classification number: H04L63/0272 ,  H04L12/4633 ,  H04L12/66 ,  H04L63/0428 ,  H04L63/18 ,  H04L67/10

Abstract: A request to establish an encrypted VPN connection between a network external to a provider network connected to the provider network via a dedicated direct physical link and a set of resources of the provider network is received. A new isolated virtual network (IVN) is established to implement an encryption virtual private gateway to be used for the connection. One or more protocol processing engines (PPEs) are instantiated within the IVN, address information of the one or more PPEs is exchanged with the external network and a respective encrypted VPN tunnel is configured between each of the PPEs and the external network. Routing information pertaining to the set of resources is provided to the external network via at least one of the encrypted VPN tunnels, enabling routing of customer data to the set of resources within the provider network from the external network via an encrypted VPN tunnel implemented over a dedicated direct physical link between the external network and the provider network.

公开(公告)号：US10560431B1

公开(公告)日：2020-02-11

申请号：US15369626

申请日：2016-12-05

Applicant: Amazon Technologies, Inc.

Inventor： Po-Chun Chen ,  Omer Hashmi ,  Sanjay Bhal

IPC: H04L29/06 ,  H04L29/08 ,  H04L12/66 ,  H04L12/46

Abstract: A request to establish an encrypted VPN connection between a network external to a provider network connected to the provider network via a dedicated direct physical link and a set of resources of the provider network is received. A new isolated virtual network (IVN) is established to implement an encryption virtual private gateway to be used for the connection. One or more protocol processing engines (PPEs) are instantiated within the IVN, address information of the one or more PPEs is exchanged with the external network and a respective encrypted VPN tunnel is configured between each of the PPEs and the external network. Routing information pertaining to the set of resources is provided to the external network via at least one of the encrypted VPN tunnels, enabling routing of customer data to the set of resources within the provider network from the external network via an encrypted VPN tunnel implemented over a dedicated direct physical link between the external network and the provider network.

公开(公告)号：US20240039895A1

公开(公告)日：2024-02-01

申请号：US18487575

申请日：2023-10-16

Applicant: Amazon Technologies, Inc.

Inventor： Po-Chun Chen ,  Omer Hashmi ,  Sanjay Bhal

IPC: H04L9/40 ,  H04L67/10 ,  H04L12/66 ,  H04L12/46

CPC classification number: H04L63/0272 ,  H04L67/10 ,  H04L12/66 ,  H04L12/4633 ,  H04L63/0428 ,  H04L63/18

Abstract: A request to establish an encrypted VPN connection between a network and the provider network via a dedicated direct physical link and a set of resources of the provider network is received. An isolated virtual network (IVN) is established to implement an encryption virtual private gateway to be used for the connection. Protocol processing engines (PPEs) are instantiated within the IVN, address information of the PPEs is exchanged with the external network and an encrypted VPN tunnel is configured between the PPEs and the external network. Routing information pertaining to the set of resources is provided to the external network via at least one of the encrypted VPN tunnels, enabling routing of customer data to the set of resources within the provider network from the external network via an encrypted VPN tunnel implemented over a dedicated direct physical link between the external network and the provider network.

公开(公告)号：US20200252375A1

公开(公告)日：2020-08-06

申请号：US16785211

申请日：2020-02-07

Applicant: Amazon Technologies, Inc.

Inventor： Po-Chun Chen ,  Omer Hashmi ,  Sanjay Bhal

IPC: H04L29/06 ,  H04L12/46 ,  H04L12/66 ,  H04L29/08

Abstract: A request to establish an encrypted VPN connection between a network external to a provider network connected to the provider network via a dedicated direct physical link and a set of resources of the provider network is received. A new isolated virtual network (IVN) is established to implement an encryption virtual private gateway to be used for the connection. One or more protocol processing engines (PPEs) are instantiated within the IVN, address information of the one or more PPEs is exchanged with the external network and a respective encrypted VPN tunnel is configured between each of the PPEs and the external network. Routing information pertaining to the set of resources is provided to the external network via at least one of the encrypted VPN tunnels, enabling routing of customer data to the set of resources within the provider network from the external network via an encrypted VPN tunnel implemented over a dedicated direct physical link between the external network and the provider network.