Managing communications using alternative packet addressing

• US 10,355,991 B1
• Filed: 09/26/2013
• Issued: 07/16/2019
• Est. Priority Date: 09/28/2010
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Sivasubramanian, Swaminathan, Brandwine, Eric Jason, Certain, Tate Andrew, Marshall, Bradley E.
• Primary Examiner(s): Fan, Hua
• Application Number:
  US14/038,451
• Time in Patent Office: 2,119 Days
• CPC Class Codes: H04L 2101/686 using dual-stack hosts, e.g. in Internet protocol version 4 [IPv4]/Internet protocol version 6 [IPv6] networks
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 45/64 using an overlay routing layer
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Techniques are described for managing communications for a managed virtual computer network overlaid on a distinct substrate computer network, including for communications involving computing nodes of the managed virtual computer network that use an alternative addressing scheme to direct network packets and other network communications to intended destination locations by using textual network node monikers instead of numeric IP addresses to represent computing nodes at a layer 3 or “network layer” of a corresponding computer networking stack in use by the computing nodes. The techniques are provided without modifying or configuring the network devices of the substrate computer network, by using configured modules to manage and modify communications from the logical edge of the substrate network.

Claims

1. A computer-implemented method, comprising:

receiving, by one or more programmed computing systems, a communication directed to a destination in a virtual computer network, the virtual computer network being overlaid on a substrate network and using, as an addressing scheme for the virtual computer network, a plurality of textual network node monikers that include alphabetic characters, each computing node of the virtual computer network being associated with a substrate network address for the substrate network;

determining, by the one or more programmed computing systems and without resolving a textual network node moniker specified as the destination of the received communication to an actual physical address, a computing node of the virtual computer network that is associated with the specified textual network node moniker by identifying a virtual hardware address associated with the specified textual network node moniker;

encoding, by the one or more programmed computing systems, the received communication in a manner specific to the substrate network and to indicate, as a destination of the encoded communication in the substrate network, the associated substrate network address of the determined computing node; and

sending, by the one or more programmed computing systems, the encoded communication to the determined computing node via the substrate network.

2. The computer-implemented method of claim 1 wherein the associated substrate network address for each computing node of the virtual computer network corresponds to a location of the computing node in the substrate network.

3. The computer-implemented method of claim 1 wherein the specified textual network node moniker is associated with two or more of multiple computing nodes of the virtual computer network, and wherein the determining of the computing node associated with the specified textual network node moniker includes selecting one of the two or more computing nodes to receive the communication in accordance with a defined policy that is associated with the specified textual network node moniker and that is based at least in part on performing load balancing for the two or more computing nodes, on performing anycast for the two or more computing nodes, or on performing multicast for the two or more computing nodes.

4. The computer-implemented method of claim 1 wherein the one or more programmed computing systems are part of a configurable network service that provides the virtual computer network for a customer.

5. The computer-implemented method of claim 4 further comprising receiving configuration information from the customer for the virtual computer network that includes a specification of at least some of the plurality of textual network node monikers for use within the virtual computer network.

6. The computer-implemented method of claim 4 further comprising receiving configuration information from the customer for the virtual computer network that includes one or more defined policies to control use of at least one of the plurality of textual network node monikers within the virtual computer network.

7. The computer-implemented method of claim 1 further comprising configuring at least some computing nodes of the virtual computer network to use a computer networking stack that supports use of the textual network node monikers instead of numeric network addresses.

8. The computer-implemented method of claim 7 wherein the numeric network addresses are numeric Internet Protocol (“

IP”

) network addresses, and wherein the computer networking stack uses an alternative addressing scheme that supports use of the textual network node monikers at a networking stack network layer.

9. The computer-implemented method of claim 7 wherein the computer networking stack includes a layer that supports use of the textual network node monikers and that corresponds to a layer 3 network layer of Open Systems Interconnection (“

OSI”

) model, and wherein the computer networking stack includes another distinct layer that supports use of Domain Name System (“

DNS”

) names and that corresponds to a layer 7 application layer of the OSI model.

10. The computer-implemented method of claim 1 wherein the virtual computer network includes multiple computing nodes that are each a virtual machine hosted on one of multiple physical computing systems of a configurable network service, and wherein the method further comprises configuring one or more virtual machine communication manager modules that execute on one or more of the physical computing systems to manage communications for the hosted virtual machines.

11. The computer-implemented method of claim 1 wherein the specified textual network node moniker is specified by the received communication at a networking stack network layer.

12. A non-transitory computer-readable medium having stored contents that, when executed, configure a computer system to:

receive a communication directed to a destination in a virtual computer network having multiple computing nodes, the virtual computer network being overlaid on a distinct second network and using, as an addressing scheme for the virtual computer network, textual network node monikers that include alphabetic characters, wherein each of the multiple computing nodes is associated with a distinct second network address for the second network;

determine, without resolving a first textual network node moniker specified as the destination of the received communication to an actual physical address, one of the multiple computing nodes that is associated with the first textual network node moniker by identifying a virtual hardware address associated with the specified first textual network node moniker;

modify the received communication to indicate, as a destination for the modified communication in the second network, the second network address for the second network of the determined one computing node; and

send the modified communication to the determined one computing node via the second network.

13. The non-transitory computer-readable medium of claim 12 wherein the second network is a substrate network, and wherein the associated second network address for each of the multiple computing nodes corresponds to a location of the computing node in the substrate network.

14. The non-transitory computer-readable medium of claim 12 wherein the first textual network node moniker is associated with two or more of the multiple computing nodes, and wherein the determining of the one computing node includes selecting at least one of the two or more computing nodes to receive the communication in accordance with a defined policy that is based at least in part on performing load balancing for the two or more computing nodes, on performing anycast for the two or more computing nodes, or on performing multicast for the two or more computing nodes.

15. The non-transitory computer-readable medium of claim 12 wherein the configured computer system is part of a configurable network service that provides the virtual computer network for a customer.

16. The non-transitory computer-readable medium of claim 15 wherein the stored contents further configure the computer system to receive configuration information from the customer for the virtual computer network that includes an indication of at least some of the textual network node monikers for use within the virtual computer network.

17. The non-transitory computer-readable medium of claim 15 wherein the stored contents further configure the computer system to receive configuration information from the customer for the virtual computer network that includes one or more defined policies to control use of at least one of the textual network node monikers within the virtual computer network.

18. The non-transitory computer-readable medium of claim 15 wherein the stored contents further configure the computer system to configure at least some of the multiple computing nodes of the virtual computer network to use a computer networking stack that uses the textual network node monikers instead of numeric network addresses.

19. The non-transitory computer-readable medium of claim 18 wherein the numeric network addresses are numeric Internet Protocol (“

IP”

) network addresses, and wherein the computer networking stack replaces a prior computer networking stack that supports use of the numeric IP network addresses.

20. The non-transitory computer-readable medium of claim 18 wherein the computer networking stack includes a layer that supports use of the textual network node monikers and that corresponds to a layer 3 network layer of the Open Systems Interconnection (“

OSI”

) model, and wherein the computer networking stack includes another distinct layer that supports use of Domain Name System (“

DNS”

) names and that corresponds to a layer 7 application layer of the OSI model.

21. The non-transitory computer-readable medium of claim 12 wherein the multiple computing nodes are each a virtual machine hosted on one of multiple provided physical computing systems.

22. A system, comprising:

one or more hardware processors of one or more computing systems; and

one or more memories with stored instructions that, when executed by at least one of the one or more hardware processors, cause the system to;

receive a communication directed to a destination in a virtual computer network, the virtual computer network being overlaid on a substrate network and using, as an addressing scheme for the virtual computer network, multiple textual network node monikers that include alphabetic characters, wherein each computing node of the virtual computer network is associated with a substrate network address for the substrate network;

determine, without resolving a textual network node moniker included in the received communication as the destination of the communication to an actual physical address, a computing node of the virtual computer network that is associated with the included textual network node moniker by identifying a virtual hardware address associated with the included textual network node moniker;

encode the received communication in a manner specific to the substrate network and to indicate, as a destination of the encoded communication in the substrate network, the associated substrate network address of the determined computing node; and

send the encoded communication to the determined computing node via the substrate network.

23. The system of claim 22 wherein the substrate network addresses of the computing nodes correspond to locations of the computing nodes in the substrate network, and wherein using the multiple textual network node monikers as an addressing scheme includes using one of the multiple textual network node monikers for designating multiple computing nodes in the virtual computer network.

24. The system of claim 22 wherein the textual network node moniker included in the communication is associated with two or more computing nodes of the virtual computer network, and wherein the determining of the computing node associated with the textual network node moniker included in the communication includes selecting at least one of the two or more computing nodes to receive the encoded communication in accordance with a defined policy that is associated with the textual network node moniker included in the communication and that is based at least in part on performing load balancing for the two or more computing nodes, on performing anycast for the two or more computing nodes, or on performing multicast for the two or more computing nodes.