Partitioned private interconnects to provider networks

• US 10,217,145 B1
• Filed: 02/18/2014
• Issued: 02/26/2019
• Est. Priority Date: 02/18/2014
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Ye, Shuai, Stalzer, Mark Edward, Cullen, Patrick Brigham
• Primary Examiner(s): Danneman, Paul
• Application Number:
  US14/183,160
• Time in Patent Office: 1,834 Days
• Field of Search: 705 34
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 43/0894 Packet rate
• CPC Class Codes: H04L 43/16 Threshold monitoring

Abstract

Methods and apparatus for partitioned private interconnects to provider networks are described. At least a portion of available bandwidth of a private physical interconnect between a provider network and a connectivity intermediary'"'"'s network is designated as the bandwidth limit of an interconnect partition set up on behalf of a customer at the request of the intermediary. The intermediary'"'"'s network comprises one or more devices to which at least one of the customer'"'"'s devices is connected. Access to one or more resources of the provider network via the interconnect is enabled. Traffic monitoring results associated with the interconnect are used to enforce the designated bandwidth limit of the partition.

Claims

1. A system, comprising:

a provider network comprising a plurality of computing devices configured to implement a plurality of resources of the provider network, wherein the plurality of resources comprises resources configured to be allocated to one or more customers of the provider network as compute resources, storage resources, or database resources; and

one or more computing devices configured to;

in response to a request from a connectivity intermediary, provide instructions for attaching one or more cables to a router of the provider network to establish the private physical interconnect between the provider network and an intermediary network of the connectivity intermediary to which the one or more customers of the connectivity intermediary have network access, wherein the intermediary network is a separate network from the provider network and is managed by a different entity than an entity that manages the provider network;

designate, at the request of the connectivity intermediary, at least a portion of a bandwidth capacity of the private physical interconnect as a bandwidth limit of a dedicated interconnect partition established on behalf of a particular customer of the one or more customers;

receive, at the provider network via a programmatic interface, an indication that the particular customer accepts billing responsibility for the interconnect partition;

enable access to one or more resources of the provider network that are allocated to the particular customer, from one or more network devices of a customer network of the particular customer via the interconnect partition;

monitor traffic between the one or more network devices of the customer network and the one or more resources of the provider network allocated to the particular customer; and

utilize one or more results of the monitoring to (a) enforce the bandwidth limit of the interconnect partition and (b) determine a billing amount owed by the particular customer for a use of the interconnect partition.

2. The system as recited in claim 1, wherein, to enable access to the one or more resources, the one or more computing devices are further configured to:

establish a virtual interface associated with the interconnect partition using a set of parameters received at the provider network, wherein the set of parameters includes one or more of;

(a) a VLAN (virtual local area network) identifier, (b) an Internet Protocol (IP) address, (c) a Border Gateway Protocol (BGP) Autonomous System Number (ASN), or (d) a BGP key.

3. The system as recited in claim 2, wherein said virtual interface is established in response to a request from the connectivity intermediary.

4. The system as recited in claim 2, wherein said virtual interface is established in response to a request from the particular customer.

5. The system as recited in claim 2, wherein the one or more resources of the provider network allocated to the particular customer comprise a particular computing device of an isolated virtual network established at the request of the particular customer.

6. A method, comprising:

performing, by one or more computing devices;

providing, in response to a request from a connectivity intermediary, instructions for attaching one or more cables to a router of a provider network to establish a private physical interconnect between an intermediary network of the connectivity intermediary and the provider network, wherein the intermediary network is a separate network from the provider network and is managed by a different entity than an entity that manages the provider network;

configuring an interconnect partition on behalf of a particular customer of the connectivity intermediary, wherein said configuring comprises designating, as a bandwidth limit of the interconnect partition, at least a portion of available bandwidth of the private physical interconnect between the provider network and the intermediary network, wherein a device of the particular customer is linked to the intermediary network;

enabling access to one or more resources of the provider network allocated to the particular customer from the device of the particular customer via the private physical interconnect, wherein the one or more resources of the provider network allocated to the particular customer comprise one or more compute resources, one or more storage resources, or one or more database resources, implemented on computing devices of the provider network;

monitoring traffic between the device of the particular customer and the one or more resources of the provider network allocated to the particular customer; and

utilizing one or more results of said monitoring to enforce the bandwidth limit of the interconnect partition.

7. The method as recited in claim 6, further comprising performing, by the one or more computing devices:

configuring, to enable access to the one or more resources of the provider network allocated to the particular customer, a virtual interface using one or more of;

(a) a VLAN (virtual local area network) identifier, (b) an Internet Protocol (IP) address, (c) a Border Gateway Protocol (BGP) Autonomous System Number (ASN), or (d) a BGP key.

8. The method as recited in claim 7, wherein said configuring the virtual interface is performed in response to a request from the connectivity intermediary.

9. The method as recited in claim 7, wherein said configuring the virtual interface is performed in response to a request from the particular customer.

10. The method as recited in claim 6, further comprising performing, by the one or more computing devices:

receiving, prior to said enabling, a confirmation at the provider network via a programmatic interface, that the particular customer accepts billing responsibility for the interconnect partition.

11. The method as recited in claim 10, further comprising performing, by the one or more computing devices:

determining a billing amount owed by the particular customer for the interconnect partition, comprising (a) a setup charge associated with establishing the interconnect partition and (b) a traffic dependent amount.

12. The method as recited in claim 6, wherein the one or more resources of the provider network allocated to the particular customer comprise a particular computing device of an isolated virtual network established at the request of the particular customer.

13. The method as recited in claim 6, wherein the one or more resources of the provider network allocated to the particular customer comprise a particular node of a network-accessible service, wherein the particular node is configured with a public IP address, and wherein the network-accessible service comprises one of:

(a) a computing service, (b) a storage service, or (c) a database service.

14. The method as recited in claim 6, further comprising:

establishing, prior to said configuring the interconnect partition, the private physical interconnect between a co-located pair of routers comprising the router of the provider network and a router of the connectivity intermediary.

15. The method as recited in claim 6, further comprising performing, by the one or more computing devices:

receiving an interconnect partition metadata request pertaining to the private physical interconnect from the connectivity intermediary via a programmatic interface; and

providing, in response to the request, an indication of a plurality of interconnect partitions configured using the private physical interconnect, including the interconnect partition established on behalf of the particular customer and another interconnect partition established on behalf of a different customer of the connectivity intermediary.

16. A non-transitory computer-accessible storage medium storing program instructions that when executed on one or more processors:

provide instructions for attaching one or more cables to a router of a provider network to establish a private physical interconnect between an intermediary network of a connectivity intermediary and the provider network, wherein the intermediary network is a separate network from the provider network and is managed by a different entity than an entity that manages the provider network;

designate, as a bandwidth limit of an interconnect partition configured on behalf of a particular customer of the connectivity intermediary, at least a portion of available bandwidth of the private physical interconnect between the provider network and the intermediary network, wherein a device of the particular customer is linked to the intermediary network;

enable access to one or more resources of the provider network allocated to the particular customer from the device of the particular customer via the private physical interconnect, wherein the one or more resources of the provider network allocated to the particular customer comprise one or more compute resources, one or more storage resources, or one or more database resources, implemented on computing devices of the provider network; and

utilize one or more traffic monitoring results associated with the private physical interconnect to enforce the bandwidth limit of the interconnect partition.

17. The non-transitory computer-accessible storage medium as recited in claim 16, wherein the instructions when executed at the one or more processors:

configure, to enable access to the one or more resources allocated to the particular customer, a virtual interface using one or more of;

(a) a VLAN (virtual local area network) identifier, (b) an Internet Protocol (IP) address, (c) a Border Gateway Protocol (BGP) Autonomous System Number (ASN), or (d) a BGP key.

18. The non-transitory computer-accessible storage medium as recited in claim 16, wherein the instructions when executed at the one or more processors:

receive, prior to enabling said access to one or more resources allocated to the particular customer, an indication at the provider network via a programmatic interface, that the particular customer accepts billing responsibility for the interconnect partition.

19. The non-transitory computer-accessible storage medium as recited in claim 16, wherein the one or more resources of the provider network allocated to the particular customer comprise a particular computing device of an isolated virtual network established at the request of the particular customer.

20. The non-transitory computer-accessible storage medium as recited in claim 16, wherein the one or more resources of the provider network allocated to the particular customer comprise a particular node of a network-accessible service, wherein the particular node is configured with a public IP address, and wherein the network-accessible service comprises one of:

(a) a computing service, (b) a storage service, or (c) a database service.