Interfaces to manage direct network peerings

• US 10,044,681 B2
• Filed: 05/12/2014
• Issued: 08/07/2018
• Est. Priority Date: 11/29/2011
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Miller, Kevin Christopher, Doane, Andrew J., Abuelela, Mahmoud A., Furr, Michael B.
• Primary Examiner(s): Yuen, Kan
• Application Number:
  US14/275,421
• Publication Number:
  US 20140250217A1
• Time in Patent Office: 1,548 Days
• CPC Class Codes: H04L 12/1435 volume-based
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0896 Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities flow or congestion control using dynamic resource allocation, e.g. in-call renegotiation, H04L47/76
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Methods and apparatus for interfaces to manage direct network peerings. A system may include a data center, endpoint routers and a connectivity coordinator. The coordinator implements a programmatic interface defining connectivity operations. The coordinator receives a request for dedicated connectivity to data center resources, formatted according to the interface. The coordinator selects a target endpoint router at which to establish a physical link to implement the dedicated connectivity, and transmits a response identifying the target endpoint router and including configuration instructions for setting up a physical link for the dedicated connectivity.

Claims

1. A system, comprising:

a data center comprising one or more computers that implement a resource collection designated to respond to service requests received from a client;

a plurality of endpoint routers linked to the data center by one or more private network paths; and

a connectivity coordinator, implemented on one or more computers, configured to;

select a target endpoint router of the plurality of endpoint routers, based at least in part upon a connectivity request from the client for dedicated connectivity to the resource collection and a determination that the target endpoint router is configurable to provide a route over a private network path of the one or more private network paths in accordance with the connectivity request to provide the client access to the resource collection; and

generate a notification comprising configuration instructions for establishing a physical network link between the client and the target endpoint router by attaching one or more cables to the selected target endpoint router to provide at least a portion of the dedicated connectivity for the client to access the resource collection.

2. The system as recited in claim 1, wherein:

the resource collection comprises a plurality of resources implemented by the one or more computers; and

the connectivity coordinator is configured to;

receive one or more selection criteria identifying a subset of the plurality of resources to which an isolated connection is to be provided over the physical network link; and

route network traffic in accordance with the selection criteria.

3. The system as recited in claim 1, wherein the target endpoint router is housed within a facility requiring authorization for physical access, and wherein the reply includes an indication of an authorization of physical access to the target endpoint router at the facility.

4. The system as recited in claim 1, wherein the connectivity coordinator is further configured to:

receive an isolation request from the client to establish a logically isolated network path to the resource collection via the physical network link; and

implement a network isolation mechanism to establish the logically isolated network path in accordance with the isolation request.

5. The system as recited in claim 4, wherein the network isolation mechanism comprises at least one of:

a virtual local area network (VLAN) mechanism or a Multi-Protocol Label Switching (MPLS) technique.

6. The system as recited in claim 1, wherein the connectivity coordinator is further configured to:

receive, from the client, identification information of a network device to be used to transmit network traffic of the client to the resource collection; and

provide, to the client, one or more configuration instructions for the network device based on the identification information.

7. A method, comprising:

selecting an endpoint router of a plurality of endpoint routers of a provider network, based at least in part upon a connectivity request for dedicated connectivity of a client to a resource collection of the provider network and a determination that the endpoint router is configurable to provide a route over a private network to the resource collection in accordance with the connectivity request; and

generating a notification comprising configuration information for establishing a physical network link between the client and the endpoint router by attaching one or more cables to the selected endpoint router to provide at least a portion of the dedicated connectivity.

8. The method as recited in claim 7, further comprising:

receiving identification information of a network device to be used to transmit network traffic of the client to the resource collection; and

providing one or more configuration instructions for the network device based on the identification information.

9. The method as recited in claim 7, wherein the resource collection comprises a plurality of resources, further comprising:

receiving one or more selection criteria identifying a subset of the plurality of resources to which an isolated connection is to be provided over the physical network link; and

routing network traffic in accordance with the selection criteria.

10. The method as recited in claim 9, wherein a selection criteria of the one or more selection criteria comprises a virtual local area network (VLAN) tag.

11. The method as recited in claim 7, wherein the endpoint router is housed within a facility requiring authorization for physical access, and wherein the notification includes an indication of an authorization of physical access to the endpoint router at the facility.

12. The method as recited in claim 7, wherein transmitting the notification comprises sending the notification to an operator of a facility at which the endpoint router is housed.

13. A non-transitory computer-accessible storage medium storing program instructions that when executed on one or more processors:

generate a notification comprising configuration information for establishing a physical network link between a target endpoint router of a provider network and a client of the provider network by attaching one or more cables to the target endpoint router to provide at least a portion of a dedicated connectivity between the client of the provider network and a resource collection of the provider network, based at least in part upon a connectivity request from the client for the dedicated connectivity and a determination that the target endpoint router is configurable to provide a route over a private network path to the resource collection in accordance with the connectivity request; and

transmit the notification.

14. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the program instructions when executed on the one or more processors:

after the physical network link has been established, transmit a confirmation message indicating that the dedicated connectivity has been provided.

15. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the configuration information comprises at least one of:

a physical port of the target endpoint router, a rack identifier, a cage identifier or a patch panel identifier.

16. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the connectivity request comprises one or more of:

a bandwidth requirement, an availability requirement, or a requirement for a plurality of physical paths to the resource collection.

17. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the program instructions when executed on the one or more processors:

receive identification information of a network device to be used to transmit network traffic of the client to the resource collection; and

provide one or more configuration instructions for the network device based on the identification information.

18. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the resource collection comprises a plurality of resources, wherein the program instructions when executed on the one or more processors:

receive one or more selection criteria identifying a subset of the plurality of resources to which an isolated connection is to be provided over the physical network link; and

generate routing information to route network traffic in accordance with the selection criteria.

19. The non-transitory computer-accessible storage medium as recited in claim 18, wherein a selection criteria of the one or more selection criteria comprises a virtual local area network (VLAN) tag.

20. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the target endpoint router is housed within a facility requiring authorization for physical access, and wherein the notification includes an indication of an authorization of physical access to the target endpoint router at the facility.