Resource placement templates for virtual networks

• US 8,484,353 B1
• Filed: 09/28/2010
• Issued: 07/09/2013
• Est. Priority Date: 09/28/2010
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Johnson, Don, Brandwine, Eric J., Theimer, Marvin M., Sivasubramanian, Swaminathan
• Primary Examiner(s): Fan, Hua
• Application Number:
  US12/892,850
• Time in Patent Office: 1,015 Days
• Field of Search: 709/226
• US Class Current: 709/226
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

With the advent of virtualization technologies, networks and routing for those networks can now be simulated using commodity hardware. For example, virtualization technologies can be adapted to allow a single physical computing machine to be shared among multiple virtual networks by providing one or more virtual machines simulated in software by the single physical computing machine, with each virtual machine acting as a distinct logical computing system. In addition, as routing can be accomplished through software, additional network setup flexibility can be provided to the virtual network in comparison with hardware-based routing. In some implementations, virtual network setup can be abstracted through the use of resource placement templates, allowing users to create virtual networks compliant with a customer'"'"'s networking policies without necessarily having knowledge of what those policies are.

Claims

1. Non-transitory computer-readable storage having stored thereon instructions that, when executed, direct a computing system to perform operations comprising:

receiving a request from a user for a virtual computing resource on a virtual network of a customer, the virtual network comprising virtual network subnets;

obtaining a resource placement template from the user, the resource placement template including placement restrictions on the virtual computing resource, wherein the resource placement template comprises selection criteria for selecting virtual network subnets;

obtaining network topology information for the virtual network, the network topology information including access restrictions for each of the virtual network subnets;

selecting a virtual network subnet from the virtual network subnets based in part on the access restrictions for the virtual network subnets and the placement constraints for the virtual computing resource, wherein the virtual network subnet is selected based at least partly on the selection criteria, and wherein the selection criteria comprises one or more of a desired bandwidth and latency, for the virtual network subnet; and

allocating the computing resource to the selected virtual network subnet of the virtual network.

2. The non-transitory computer-readable storage of claim 1, wherein the resource placement template is generated by a customer network administrator.

3. The non-transitory computer-readable storage of claim 2, wherein the requesting user is a standard user and further wherein the step of obtaining the resource placement template from the user comprises the standard user providing the resource placement template generated by the network administrator.

4. The non-transitory computer-readable storage of claim 1, wherein the virtual computing resource is configured to operate with access constraints of the virtual subnet.

5. The non-transitory computer-readable storage of claim 1, wherein the resource placement template specifies a set of one or more virtual network locations and wherein selecting the virtual network subnet based in part on the access restrictions further comprises selecting a virtual network location from the set of the one or more virtual network location based in part on the access restrictions.

6. The non-transitory computer-readable storage of claim 1, wherein access restrictions for the selected virtual network subnet limit accessible network locations from the virtual computing resource.

7. The non-transitory computer-readable storage of claim 1, wherein access restrictions for the selected virtual network subnet specify which other subnets are accessible from the selected virtual network subnet.