公开(公告)号：US11615460B1

公开(公告)日：2023-03-28

申请号：US14090662

申请日：2013-11-26

Applicant: Amazon Technologies, Inc.

Inventor： Alexander Michael McNamara ,  Kirk Arlo Petersen ,  Nathan Lee Wesling ,  Jack Bradley Jones ,  Sridhar Boyapati

IPC: G06Q10/06 ,  G06Q10/08 ,  G06Q30/06 ,  G06Q30/0601 ,  G06Q10/0631 ,  G06Q10/087 ,  G06Q10/0835

Abstract: Described is a system and method for developing and dynamically updating user paths through a materials handling facility. A user path through a materials handling facility may be developed that will route a user past one or more items (e.g., pick list items, recommended items, wish list items, promotional items) planned for the user. If the user does not follow the user path, the user path may be dynamically updated to account for the current location of the user and/or to consider other actions performed by the user.

公开(公告)号：US10205698B1

公开(公告)日：2019-02-12

申请号：US14091272

申请日：2013-11-26

Applicant: Amazon Technologies Inc.

Inventor： Kirk Arlo Petersen ,  Ajith Jayamohan ,  Preetha Chatterjee

IPC: H04L29/12

Abstract: Systems and method are provided for source-dependent address resolution. Multiple computing devices may be associated with identifiers, such as network names. These computing devices may further be associated with both internally and externally accessible network addresses. A source-dependent address resolution component may resolve a network identifier into an internal or external address based on a network of a requesting device. Specifically, a request for address resolution may be received from a source network, and be resolvable into an address of a target network. If the source network and target network are the same, an internal address of that shared network is returned. If the source network and the target network are different, an external address enabling external communication with the target network is returned. In some embodiments, determination of a source network may be facilitated based on a source port of a request.

公开(公告)号：US09774611B1

公开(公告)日：2017-09-26

申请号：US14204864

申请日：2014-03-11

Applicant: Amazon Technologies, Inc.

Inventor： Joseph Paul Zipperer ,  Andrew Bruce Dickinson ,  Kirk Arlo Petersen

IPC: H04L29/06 ,  G06F21/55 ,  G06F21/57

CPC classification number: H04L63/1408 ,  G06F21/552 ,  G06F21/554 ,  G06F21/57 ,  G06F21/85 ,  H04L63/0218 ,  H04L63/0227 ,  H04L63/0236 ,  H04L63/0263 ,  H04L63/1441 ,  H04L63/1458 ,  H04L2463/141

Abstract: Functionality is disclosed herein for dynamically deploying an upstream network traffic filter in a network. The upstream network filter is dynamically deployed in a location that is closer to an entry point of an attack such that attack traffic reaches the upstream network filter before reaching a network traffic filter that is configured to perform network traffic filtering for a computing resource that is under attack. The upstream network traffic filter includes rules that are based on at least a portion of the rules that are applied by the network traffic filter.

公开(公告)号：US12243093B1

公开(公告)日：2025-03-04

申请号：US16712887

申请日：2019-12-12

Applicant: Amazon Technologies, Inc.

Inventor： Alexander Michael McNamara ,  Nathan Lee Wesling ,  Natalie Thuy-Tien Nguyen ,  Jack Bradley Jones ,  Felix Joseph Etienne Pageau ,  Lu Ye ,  Kevin Alexander Lee ,  Sridhar Boyapati ,  Benjamin Ralph Hollis ,  David William Bettis ,  Kirk Arlo Petersen ,  Korwin Jon Smith

IPC: G06Q30/00 ,  G06Q30/0601

Abstract: Described is a system and method for routing output information to one or more of a plurality of output devices. In one implementation, output information that includes information to be presented and a location information identifying where the output information is to be presented may be generated by an output host. The output information is received by an output router that determines, based on the location information, an output device and routes the output information to the output device for presentation.

公开(公告)号：US09847970B1

公开(公告)日：2017-12-19

申请号：US14266619

申请日：2014-04-30

Applicant: Amazon Technologies, Inc.

Inventor： Joseph Paul Zipperer ,  Andrew Bruce Dickinson ,  Kirk Arlo Petersen

IPC: H04L29/06

CPC classification number: H04L63/1458

Abstract: Functionality is disclosed herein for regulating bandwidth that is available for network traffic flowing through a data communications network. In response to attack traffic being detected, one or more traffic regulators are set to control an available bandwidth to be used by the attack traffic. The one or more traffic regulators are adjusted until an attack is no longer detected. After the attack ends, the traffic regulator may be disabled or set to a different mode of operation.

公开(公告)号：US12177123B1

公开(公告)日：2024-12-24

申请号：US17810290

申请日：2022-06-30

Applicant: Amazon Technologies, Inc.

Inventor： Young Ha Jung ,  Upendra Bhalchandra Shevade ,  Mathew Lehwess ,  Matthew B Barr ,  Akshay Choudhry ,  Shuai Ye ,  Ethan Joseph Torretta ,  Kirk Arlo Petersen

IPC: H04L45/745

Abstract: Route tables may be associated with ingress traffic for logically isolated networks. A routing device at the edge of a logically isolated network may receive a route to include in a route table that is associated with ingress traffic to the logically isolated network, where the ingress traffic is destined for a block of public or private IP addresses. The route instructs the edge routing device to forward such ingress traffic to a network interface of a network appliance hosted in the logically isolated network. Network packets received at the edge routing device may have a destination of one or more public or private IP addresses in the block of public/private IP addresses. The edge routing device may identify the route in the route table that forwards the ingress network traffic destined for the block of public or private IP addresses to the network interface for the network appliance.

公开(公告)号：US10581728B1

公开(公告)日：2020-03-03

申请号：US14033157

申请日：2013-09-20

Applicant: Amazon Technologies, Inc.

Inventor： Joseph Paul Zipperer ,  Andrew Bruce Dickinson ,  Kirk Arlo Petersen

IPC: H04L12/721 ,  H04L29/06

Abstract: A method and apparatus for rate limiting network traffic are provided. A plurality of network devices may receive network traffic and route the network traffic to a destination. Rate limits may be imposed on the output rate of the plurality of network devices. The rate limits may be adjusted as the flow of the network traffic changes.

公开(公告)号：US10510109B1

公开(公告)日：2019-12-17

申请号：US14101295

申请日：2013-12-09

Applicant: Amazon Technologies, Inc.

Inventor： Alexander Michael McNamara ,  Nathan Lee Wesling ,  Natalie Thuy-Tien Nguyen ,  Jack Bradley Jones ,  Felix Joseph Etienne Pageau ,  Lu Ye ,  Kevin Alexander Lee ,  Sridhar Boyapati ,  Benjamin Ralph Hollis ,  David William Bettis ,  Kirk Arlo Petersen ,  Korwin Jon Smith

IPC: G06Q10/10 ,  G06Q30/06 ,  G06Q30/00

Abstract: Described is a system and method for routing output information to one or more of a plurality of output devices. In one implementation, output information that includes information to be presented and a location information identifying where the output information is to be presented may be generated by an output host. The output information is received by an output router that determines, based on the location information, an output device and routes the output information to the output device for presentation.

公开(公告)号：US20190319914A1

公开(公告)日：2019-10-17

申请号：US16271211

申请日：2019-02-08

Applicant: Amazon Technologies, Inc.

Inventor： Kirk Arlo Petersen ,  Ajith Jayamohan ,  Preetha Chatterjee

IPC: H04L29/12

Abstract: Systems and method are provided for source-dependent address resolution. Multiple computing devices may be associated with identifiers, such as network names. These computing devices may further be associated with both internally and externally accessible network addresses. A source-dependent address resolution component may resolve a network identifier into an internal or external address based on a network of a requesting device. Specifically, a request for address resolution may be received from a source network, and be resolvable into an address of a target network. If the source network and target network are the same, an internal address of that shared network is returned. If the source network and the target network are different, an external address enabling external communication with the target network is returned. In some embodiments, determination of a source network may be facilitated based on a source port of a request.

公开(公告)号：US09602330B1

公开(公告)日：2017-03-21

申请号：US13901367

申请日：2013-05-23

Applicant: Amazon Technologies, Inc.

Inventor： Andrew Bruce Dickinson ,  Kirk Arlo Petersen

IPC: G06F15/16 ,  H04L29/06 ,  H04L29/08

CPC classification number: H04L29/06095 ,  H04L63/1458 ,  H04L67/14 ,  H04L69/16 ,  H04L69/163

Abstract: Techniques are disclosed for dividing a TCP handshake into multiple parts, in a system comprising an edge device, an intermediary computing node, and a destination computing node. A client sends a TCP SYN packet to the edge device, to establish a TCP connection with the destination computing node. The edge device performs the handshake, and then forwards an ACK packet to the intermediary computing node. The intermediary computing node uses that ACK packet to generate a second SYN packet, and uses that SYN packet to perform a TCP handshake with the destination computing node. Then, TCP sequence numbers are converted between what is expected by the client and destination in packets sent between the two.