Managing use of alternative intermediate destination computing nodes for provided computer networks

• US 10,361,911 B2
• Filed: 03/04/2016
• Issued: 07/23/2019
• Est. Priority Date: 03/31/2010
• Status: Active Grant

• Current Assignee: Planet Lab Tb, Inc.
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Brandwine, Eric Jason, Miller, Kevin Christopher
• Primary Examiner(s): Kim, Edward
• Application Number:
  US15/061,851
• Publication Number:
  US 20160191310A1
• Time in Patent Office: 1,236 Days
• CPC Class Codes: H04L 12/1836 with heterogeneous network architecture
• CPC Class Codes: H04L 12/1886 with traffic restrictions for efficiency improvement, e.g. involving subnets or subdomains
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/122 of virtualised topologies, e.g. software-defined networks [SDN] or network function virtualisation [NFV]
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/16 Multipoint routing
• CPC Class Codes: H04L 45/22 Alternate routing

Abstract

Techniques are described for managing communications for a managed computer network by using a defined pool of alternative computing nodes of the managed computer network that are configured to operate as intermediate destinations to handle at least some communications that are sent by and/or directed to one or more other computing nodes of the managed computer network. For example, a manager module associated with a source computing node may select a particular alternative intermediate destination computing node from a defined pool to use for one or more particular communications from the source computing node to an indicated final destination, such as based on a configured logical network topology for the managed computer network and/or on one or more other selection criteria (e.g., to enable load balancing between the alternative computing nodes). The manager module then forwards those communications to the selected intermediate destination computing node for further handling.

Claims

1. A computer-implemented method comprising:

receiving, by one or more computing systems of an online network service, configuration information from a first customer of the online network service for a virtual computer network that indicates multiple computing nodes available for use as alternative intermediate destinations for at least some communications for the virtual computer network;

receiving, by the one or more computing systems, second configuration information that is different from the configuration information and that is from a second customer of the online network service for a second virtual computer network;

providing, by the one or more computing systems, the second virtual computer network for the second customer in accordance with the second configuration information; and

providing, by the one or more computing systems, the virtual computer network for the first customer in accordance with the received configuration information, including;

selecting, based at least in part on the configuration information and before forwarding a first communication for the virtual computer network from a sending node to a destination node, a computing node from the multiple computing nodes for use with the first communication, wherein the multiple computing nodes and at least one of the sending node or the destination node are hosted by the online network service in the virtual computer network; and

forwarding the first communication from the sending node to the selected computing node, to enable the selected computing node to manage further forwarding of the first communication to the destination node.

2. The computer-implemented method of claim 1 further comprising, after the forwarding of the first communication to the selected computing node, and if the selected computing node determines to initiate further forwarding of the first communication to the destination node, further forwarding the first communication from the selected computing node to the destination node over a substrate network on which the virtual computer network is overlaid.

3. The computer-implemented method of claim 1 wherein the providing of the virtual computer network further includes:

selecting, by the one or more computing systems and from a plurality of computing nodes provided by the online network service for use by clients, a subset of the plurality for use by the virtual computer network;

provisioning, by the one or more computing systems and based at least in part on the received configuration information, the selected subset of computing nodes; and

providing, by the one or more computing systems and to the first customer over one or more computer networks, access to the provisioned selected subset of computing nodes.

4. The computer-implemented method of claim 1 wherein the received configuration information further indicates that the multiple computing nodes are part of a pool of alternative computing nodes in the virtual computer network and have one or more associated modification criteria, and wherein the method further comprises:

determining, by the one or more computing systems, that at least one of the one or more associated modification criteria is satisfied; and

modifying, by the one or more computing systems, the alternative computing nodes that are part of the pool based at least in part on the at least one satisfied modification criteria.

5. The computer-implemented method of claim 4 wherein the receiving of the configuration information further includes receiving the one or more associated modification criteria from the first customer, and wherein the determining that the at least one modification criteria is satisfied is based at least in part on monitoring the alternative computing nodes of the pool.

6. The computer-implemented method of claim 4 wherein the at least one satisfied modification criteria indicates to increase the alternative computing nodes that are part of the pool, and wherein the modifying of the alternative computing nodes that are part of the pool includes adding one or more computing nodes to the pool.

7. The computer-implemented method of claim 4 wherein the at least one satisfied modification criteria indicates to decrease the alternative computing nodes that are part of the pool based on demand decreasing for functionality provided by the alternative computing nodes of the pool, and wherein the modifying of the alternative computing nodes that are part of the pool includes removing one or more computing nodes from the pool.

8. The computer-implemented method of claim 1 wherein the multiple computing nodes provide one or more types of processing of the first communication, the one or more types of processing including at least one of firewall capabilities, intrusion detection capabilities, content analysis capabilities, network acceleration capabilities, communication format modification capabilities, or virtual private network (“

VPN”

) connection capabilities, and wherein the selecting of the computing node for the first communication includes balancing load between the multiple computing nodes.

9. The computer-implemented method of claim 1 wherein the receiving of the configuration information includes receiving information about a plurality of computing nodes that are part of the virtual computer network and that include the multiple computing nodes, and includes receiving network topology information for the virtual computer network from the first customer that specifies that the multiple computing nodes are located between two or more separate groups that each includes at least one computing node of the plurality, and wherein the sending node and the destination node are from the plurality and are part of different groups.

10. The computer-implemented method of claim 1 further comprising, under control of the selected computing node, receiving the forwarded first communication from the sending node, and performing the managing of the further forwarding of the first communication to the destination node by determining not to further forward the first communication to the destination node.

11. A non-transitory computer-readable medium having stored contents that cause a server computing system of an online network service to at least:

receive, by the server computing system, configuration information supplied by a first customer of the online network service for a virtual computer network having a plurality of computing nodes, wherein the plurality of computing nodes include a hosted node provided by the server computing system and the configuration information specifies multiple computing nodes of the plurality of computing nodes available for use as alternative intermediate destinations for at least some communications;

provide, by the server computing system and based at least in part on second configuration information that is supplied by a second customer of the online network service and is different from the configuration information, functionality of a second virtual computer network for the second customer that includes a second hosted node provided by the server computing system;

provide, by the server computing system and based at least in part on the configuration information, functionality of the virtual computer network for the first customer, including to select a computing node from the multiple computing nodes for use with a first communication being sent from the hosted node to a destination node, wherein the multiple computing nodes and at least one of the hosted node or the destination node are hosted by the online network service in the virtual computer network;

forward, by the server computing system and over an underlying computer network on which the virtual computer network is overlaid, the first communication from the server computing system to the selected computing node, to enable the selected computing node to manage further forwarding of the first communication to the destination node for the first communication.

12. The non-transitory computer-readable medium of claim 11 wherein the server computing system is one of a plurality of server computing systems that are provided by the online network service for use in hosting computing nodes for customers of the online network service, and wherein the receiving of the configuration information by the server computing system includes receiving information sent by a system manager of the online network service.

13. The non-transitory computer-readable medium of claim 12 wherein the stored contents include software instructions that, when executed, further cause the server computing system to store the received configuration information for use in providing the functionality of the virtual computer network.

14. The non-transitory computer-readable medium of claim 12 wherein the stored contents further cause an additional computing system of the online network service to implement functionality of the system manager, including:

selecting the plurality of computing nodes for the virtual computer network from a larger group of computing nodes provided by the online network service; and

sending instructions to the server computing system to provision the server computing system for use as part of the virtual computer network, the instructions indicating to implement the hosted node as part of the virtual computer network and providing information about other computing nodes of the plurality.

15. The non-transitory computer-readable medium of claim 11 wherein the receiving of the configuration information by the server computing system includes receiving mapping information identifying other computing nodes of the plurality, and wherein the forwarding of the first communication from the server computing system to the selected computing node includes using the mapping information to direct the first communication to the selected computing node in the underlying computer network.

16. The non-transitory computer-readable medium of claim 11 wherein the receiving of the configuration information includes receiving network topology information from the first customer for the virtual computer network that specifies that the multiple computing nodes are located between two or more separate groups each including at least one computing node of the plurality and that further specifies that the hosted node and the destination node are part of different groups, and wherein the selecting of the computing node is based at least in part on the network topology information.

17. A system, comprising:

one or more processors; and

one or more memories with stored instructions that, when executed by at least one of the one or more processors, cause the system to implement functionality of an online network service that provides customer-configurable virtual computer networks, including to at least;

receive, from a first customer of the online network service, first configuration information to configure a first virtual computer network for the first customer, the first configuration information specifying multiple computing nodes to use as alternative intermediate destinations for at least some communications for the first virtual network, and receive, from a second customer of the online network service, second configuration information that is different from the first configuration information to configure a second virtual computer network for the second customer;

provide, by the online network service, the second virtual computer network for the second customer in accordance with the second configuration information, and the first virtual computer network for the first customer in accordance with the first configuration information, including to select, from a plurality of computing nodes provided by the online network service, the multiple computing nodes to use as alternative intermediate destinations;

select, based at least in part on the first configuration information, and for use with a first communication from a sending node to be sent over an underlying computer network on which the first virtual computer network is overlaid, a computing node from the multiple computing nodes to use as an intermediate destination to manage further forwarding of the first communication to a destination node for the first communication, wherein the multiple computing nodes and at least one of the sending node or the destination node are hosted by the online network service in the first virtual computer network; and

forward the first communication over the underlying computer network to the selected computing node, to cause the selected computing node to manage the further forwarding of the first communication to the destination node for the first communication.

18. The system of claim 17 wherein the providing of the first virtual computer network on behalf of the first customer includes:

selecting, from the plurality of computing nodes provided by the online network service, a subset of the plurality for use by the first virtual computer network; and

providing, to the first customer over one or more computer networks, access to the first virtual computer network.

19. The system of claim 17 wherein the receiving of the first configuration information further includes receiving mapping information from a system manager of the online network service about first computing nodes that are part of the first virtual computer network and that include the multiple computing nodes, and includes receiving network topology information for the first virtual computer network that specifies that the multiple computing nodes are located between two or more separate groups each including at least one computing node of the first computing nodes, wherein the selecting of the computing node is based at least in part on the network topology information, and wherein the forwarding of the first communication is based at least in part on the mapping information.