Techniques for network redirection

• US 10,447,610 B1
• Filed: 12/05/2013
• Issued: 10/15/2019
• Est. Priority Date: 11/11/2013
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Shah, Shon Kiran, Rao, Guruprakash Bangalore, Rizzo, Thomas Christopher, Yorks, Connor John, Gillett, Kevin, Mehta, Gaurang Pankaj
• Primary Examiner(s): Chang, Jungwon
• Application Number:
  US14/098,446
• Time in Patent Office: 2,140 Days
• Field of Search: 709217, 709219, 709223, 709245, 709246, 709203, 709225, 370254
• CPC Class Codes: G06F 16/955 using information identifiers, e.g. uniform resource locators [URL]
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 40/134 Hyperlinking
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 2101/30 Types of network names
• CPC Class Codes: H04L 41/50 Network service management, e.g. ensuring proper service fulfilment according to agreements
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]
• CPC Class Codes: H04L 41/5041 characterised by the time relationship between creation and deployment of a service
• CPC Class Codes: H04L 41/5058 Service discovery by the service manager
• CPC Class Codes: H04L 41/5083 wherein the managed service relates to web hosting
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 61/4541 Directories for service discovery
• CPC Class Codes: H04L 61/4547 for personal communications, i.e. using a personal identifier
• CPC Class Codes: H04L 61/50 : Address allocation
• CPC Class Codes: H04L 61/5007 : Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 63/104 : Grouping of entities
• CPC Class Codes: H04L 67/02 : based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 : in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1095 : Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

Techniques for connecting computer system entities to remotely located computer system resources by redirecting locators are described herein. A computer system entity that requests access to a computer system resource may first obtain an identifier for that resource and, based on the identifier, may determine the region for that resource. A routing service then resolves the locator to locate a content management system that stores executable scripts that provide access to the computer system resources by redirecting the locator. The location of the executable scripts is based at least in part on the processing of the locator by the content management system.

Claims

1. A computer-implemented method for providing access to a computer system resource, comprising:

generating a uniform resource identifier corresponding to the computer system resource, the uniform resource identifier based at least in part on a unique identifier of the computer system resource and encoding a command of a plurality of commands in the uniform resource identifier;

receiving, from a requestor, a request to resolve the uniform resource identifier, wherein the uniform resource identifier corresponds to a service provider network that comprises a plurality of network entry locations each corresponding to a content provider location of a plurality of content provider locations;

selecting a network entry location, from the plurality of network entry locations, that corresponds to the uniform resource identifier;

determining, in the content provider location of the network entry location selected, a content location to access from among a plurality of content locations based at least in part on the command encoded in the uniform resource identifier; and

providing, from the content location determined, executable code whose execution is configured to determine an endpoint for the uniform resource identifier, thereby enabling the requestor to access the endpoint corresponding to the computer system resource.

2. The computer-implemented method of claim 1, wherein the executable code is provided from a data storage location containing a plurality of instances of executable code, each corresponding to an action that may be performed on the computer system resource.

3. The computer-implemented method of claim 1, wherein the executable code provided to the requestor provides access to an endpoint on a web service.

4. The computer-implemented method of claim 1, wherein the executable code provided to the requestor provides access to an endpoint on a directory service.

5. The computer-implemented method of claim 1, wherein the request from the requestor contains an alternate uniform resource identifier that redirects to the uniform resource identifier, wherein selecting the network entry location is based on the alternate uniform resource identifier.

6. The computer-implemented method of claim 1, wherein the executable code is configured such that the executable code is executed by the requestor.

7. The computer-implemented method of claim 1, wherein the executable code is configured such that the executable code is executed by the computer system resource.

8. A system, comprising one or more machine-readable mediums comprising a set of instructions, which if performed by one or more processors, cause the system to at least:

generate a uniform resource identifier to represent a service to be accessible from a plurality of network entry locations, the uniform resource identifier encoding a command and comprising a unique identifier of the service;

receive, from a requestor, a request to resolve the uniform resource identifier, wherein the uniform resource identifier corresponds to a service provider network that comprises a plurality of network entry locations each corresponding to a content provider location of a plurality of content provider locations;

route the request to a network entry location of the plurality of network entry locations, the network entry location selected based at least in part on the uniform resource identifier;

determine a content location to access from among a plurality of content locations based at least in part on the command encoded in the uniform resource identifier; and

provide, from the content location determined, executable code whose execution enables the requestor to access the service.

9. The system of claim 8, wherein a content provider instance is configured to use one or more parameters in the uniform resource identifier to route the request to the network entry location.

10. The system of claim 8, wherein the content location is selected from among a plurality of data storage locations in a provider region based at least in part on one or more parameters of the uniform resource identifier.

11. The system of claim 10, wherein the content location selected contains the plurality of content locations.

12. The system of claim 8, wherein a routing instance is configured to determine whether the uniform resource corresponds to an alternate resource identifier, and to route the request to the network entry location based on the alternate resource identifier determined.

13. The system of claim 8, wherein the executable code is one of a plurality of instances of executable code, each corresponding to an operation performed by the service.

14. The system of claim 8, wherein a content provider instance is configured to provide the executable code to the requestor.

15. The system of claim 8, wherein a content provider instance is configured to provide the executable code to a computer system resource.

16. A non-transitory computer-readable storage medium comprising executable instructions that, if executed by one or more processors of a computer system, cause the computer system to at least:

generate a uniform resource identifier to represent a service to be accessible from a plurality of network entry locations;

receive the uniform resource identifier that encodes a command and comprises an identifier of the service, wherein the uniform resource identifier corresponds to a service provider network that comprises a plurality of network entry locations each corresponding to a content provider location of a plurality of content provider locations;

select, from the plurality of network entry locations, a network entry location that corresponds to the uniform resource identifier;

determine a content location to access from among a plurality of content locations based at least in part on the network entry location and the command encoded in the uniform resource identifier; and

provide, from the content location determined, executable code whose execution is configured to determine an endpoint for the uniform resource identifier, thereby enabling access to the service.

17. The non-transitory computer-readable storage medium of claim 16, wherein the instructions further comprise instructions that, if executed by the one or more processors, further cause the computer system to use the command encoded in the uniform resource identifier to route a request to the network entry location.

18. The non-transitory computer-readable storage medium of claim 16, wherein the instructions further comprise instructions that, if executed by the one or more processors, further cause the computer system to access a data storage location in a content provider region based on the command of the uniform resource identifier, the data storage location containing the plurality of content locations.

19. The non-transitory computer-readable storage medium of claim 16, wherein a request contains an alternate uniform resource identifier that redirects to the uniform resource identifier that corresponds to a plurality of network entry locations to a service provider network.

20. The non-transitory computer-readable storage medium of claim 16, wherein the executable code is provided as a response to a request.

21. The non-transitory computer-readable storage medium of claim 16, wherein the executable code is one of a plurality of instances of executable code, each corresponding to an operation performed by the service.

22. The non-transitory computer-readable storage medium of claim 16, wherein the executable code is statically configured.

23. The non-transitory computer-readable storage medium of claim 16, wherein the executable code is configured to use the command of the uniform resource identifier to determine the endpoint.