Managing failure behavior for computing nodes of provided computer networks

• US 8,988,983 B1
• Filed: 06/18/2013
• Issued: 03/24/2015
• Est. Priority Date: 10/27/2010
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Brandwine, Eric Jason
• Primary Examiner(s): ROSE, KERRI M
• Application Number:
  US13/921,051
• Time in Patent Office: 644 Days
• Field of Search: 370216-221, 370/252, 370/254, 709/238, 709/239
• US Class Current: 370/218
• CPC Class Codes: H04L 41/064 involving time analysis
• CPC Class Codes: H04L 41/0654 using network fault recovery ring fault isolation or reconfiguration in loop networks without recovery actions by a network management system H04L12/437
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/147 for predicting network behaviour
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/28 using route fault recovery
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

Techniques are described for providing managed computer networks. In some situations, the techniques include managing communications for computing nodes of a managed computer network by using one or more particular computing nodes of the managed computer network that are configured to operate as intermediate destinations to handle at least some communications that are sent by and/or directed to one or more other computing nodes of the managed computer network. In addition, the techniques may include managing the communications in accordance with configured failure behavior specified for one or more computing nodes of the computer network, such as specified failure behavior for a computing node configured to operate as an intermediate destination that indicates how communications that would otherwise be routed via the intermediate destination computing node are to be handled if the intermediate destination computing node fails or is otherwise unavailable (e.g., to block or allow such communications).

Claims

1. A computer-implemented method comprising:

receiving, by one or more configured computing systems, configuration information that specifies a failure behavior for a first computing node of a virtual computer network to identify how to handle communications if the first computing node fails;

determining, by the one or more configured computing systems, that the first computing node is configured to act as an intermediate destination for a first communication, the determining being performed before sending the first communication over a substrate network on which the virtual computer network is overlaid;

determining, by the one or more configured computing systems, that the first computing node has failed, and determining an alternative manner of handling the first communication based on the specified failure behavior for the first computing node; and

initiating handling the first communication in the determined alternative manner.

2. The computer-implemented method of claim 1 further comprising:

determining, by the one or more configured computing systems based on the configuration information, that the first computing node is not configured to act as an intermediate destination for a second communication; and

initiating forwarding the second communication over the substrate network to an intended final destination for the second communication without providing the second communication to the first computing node.

3. The computer-implemented method of claim 1 wherein the specified failure behavior for the first computing node indicates to, while the first computing node is unavailable and for communications that would otherwise be directed to the first computing node, forward the communications to intended final destinations of the communications, and wherein the initiating handling of the first communication in the determined alternative manner includes forwarding the first communication toward an intended final destination for the first communication.

4. The computer-implemented method of claim 1 wherein the specified failure behavior for the first computing node indicates to, while the first computing node is unavailable and for communications that would otherwise be directed to the first computing node, block the communications from being forwarded to intended final destinations of the communications, and wherein the initiating handling of the first communication in the determined alternative manner includes blocking the first communication from being provided to an intended final destination for the first communication.

5. The computer-implemented method of claim 1 wherein the configuration information includes a specified network topology for the virtual computer network that indicates the first computing node is located between a sending computing node that sent the first communication and an intended final destination for the first communication, and wherein the determining that the first computing node is configured to act as the intermediate destination for the first communication is based on the specified network topology.

6. The computer-implemented method of claim 5 wherein the first computing node is configured to manage forwarding of the first communication to the intended final destination for the first communication.

7. The computer-implemented method of claim 5 wherein the one or more configured computing systems are part of a configurable network service, wherein the configuration information is specified by a client of the configurable network service, and wherein the method further comprises providing, by the configurable network service, the virtual computer network for the client by overlaying the virtual computer network on the substrate network without physically implementing the specified network topology for the virtual computer network.

8. The computer-implemented method of claim 1 further comprising determining to use the first computing node as the intermediate destination for the first communication based at least in part on one or more attributes of the first communication distinct from indications of a source and a destination of the first communication.

9. The computer-implemented method of claim 1 wherein the configuration information further indicates that the specified failure behavior for the first computing node is temporary until another computing node of the virtual computer network is available to replace the first computing node, and wherein the method further comprises, after the determining that the first computing node has failed, initiating providing another computing node for the virtual computer network to replace the failed first computing node.

10. The computer-implemented method of claim 1 further comprising, after the initiating handling of the first communication, receiving updated specified failure behavior for the first computing node corresponding to a distinct second alternative manner of handling communications while the first computing node is unavailable, and implementing the updated specified failure behavior by using the second alternative manner for handling one or more subsequent communications.

11. The computer-implemented method of claim 1 further comprising, after the initiating handling of the first communication, determining that the first computing node is available, and initiating forwarding a second communication over the substrate network to the first computing node as an intermediate destination for the second communication.

12. The computer-implemented method of claim 11 further comprising, after the forwarding of the second communication over the substrate network to the first computing node, and if the first computing node determines to initiate further forwarding of the second communication to a final destination for the second communication, performing further forwarding of the second communication from the first computing node to the final destination.

13. The computer-implemented method of claim 11 further comprising, under control of the first computing node:

receiving the forwarded second communication;

performing one or more specified types of processing on the received second communication, the performing of the one or more specified types of processing including providing at least one of a group of capabilities including firewall capabilities, intrusion detection capabilities, content analysis capabilities, network acceleration capabilities, or virtual private network (“

VPN”

) connection capabilities; and

after the performing of the one or more specified types of processing, initiating further forwarding of the received second communication to a final destination for the second communication.

14. The computer-implemented method of claim 11 further comprising, under control of the first computing node:

receiving the forwarded second communication; and

determining not to further forward the second communication to a final destination for the second communication.

15. The computer-implemented method of claim 1 wherein the first computing node includes first and second logical network interfaces each having a distinct virtual network address for the virtual computer network, and wherein the specified failure behavior for the first computing node further indicates to logically interconnect the first and second logical network interfaces while the first computing node is unavailable.

16. A non-transitory computer-readable medium having stored contents that configure a computing system to:

receive configuration information for a virtual computer network that specifies a failure behavior for a first computing node of the virtual computer network to identify, if the first computing node fails, how to handle communications planned to be forwarded via the first computing node;

receive a first communication sent by a computing node of the virtual computer network;

determine, by the configured computing system based on the configuration information, to use the first computing node as an intermediate destination for the first communication if the first computing node is available;

determine, by the configured computing system and based on the first computing node having failed, an alternative manner of handling the first communication based on the specified failure behavior for the first computing node; and

initiate handling the first communication in the determined alternative manner.

17. The non-transitory computer-readable medium of claim 16 wherein the stored contents include software instructions that, when executed by the configured computing system, further configure the computing system to:

determine, by the configured computing system based on the configuration information, not to use the first computing node as an intermediate destination for a second communication even if the first computing node is available; and

initiate forwarding the second communication, over a substrate network on which the virtual computer network is overlaid, to an intended final destination for the second communication without providing the second communication to the first computing node.

18. The non-transitory computer-readable medium of claim 16 wherein the specified failure behavior for the first computing node indicates to, while the first computing node is unavailable and for communications that would otherwise be directed to the first computing node, forward the communications to intended final destinations of the communications, and wherein the initiating handling of the first communication in the determined alternative manner includes forwarding the first communication toward an intended final destination for the first communication.

19. The non-transitory computer-readable medium of claim 16 wherein the specified failure behavior for the first computing node indicates to, while the first computing node is unavailable and for communications that would otherwise be directed to the first computing node, block the communications from being forwarded to intended final destinations of the communications, and wherein the initiating handling of the first communication in the determined alternative manner includes blocking the first communication from being provided to an intended final destination for the first communication.

20. The non-transitory computer-readable medium of claim 16 wherein the configuration information includes a specified network topology for the virtual computer network that indicates the first computing node is located between a sending computing node that sent the first communication and an intended final destination for the first communication, and wherein the determining to use the first computing node as the intermediate destination for the first communication is based on the specified network topology and is performed before forwarding the first communication over a substrate network on which the virtual computer network is overlaid.

21. The non-transitory computer-readable medium of claim 16 wherein the stored contents further configure the computing system to, after the initiating handling of the first communication, determine that the first computing node is available, and initiating forwarding a second communication over the substrate network to the first computing node as an intermediate destination for the second communication.

22. A system comprising:

one or more processors of one or more computing systems; and

a memory containing software instructions that, when executed by at least one of the one or more processors, configure the at least one processors to;

receive a first communication sent by a sending computing node of a virtual computer network;

determine, based on configuration information for the virtual computer network that includes a specified failure behavior for a first computing node of the virtual computer network, to use the first computing node of the virtual computer network as an intermediate destination for the first communication if the first computing node is available;

determine, based on the first computing node having failed, an alternative manner of handling the first communication corresponding to the specified failure behavior; and

initiate handling the first communication in the determined alternative manner.

23. The system of claim 22 wherein the software instructions, when executed by the at least one processor, further configure the one or more computing systems to:

determine, based on the configuration information, not to use the first computing node as an intermediate destination for a second communication; and

initiate forwarding the second communication, over a substrate network on which the virtual computer network is overlaid, to an intended final destination for the second communication without providing the second communication to the first computing node.

24. The system of claim 22 wherein the specified failure behavior for the first computing node indicates to, while the first computing node is unavailable and for communications that would otherwise be directed to the first computing node, forward the communications to intended final destinations of the communications, and wherein the initiating handling of the first communication in the determined alternative manner includes forwarding the first communication toward an intended final destination for the first communication.

25. The system of claim 22 wherein the specified failure behavior for the first computing node indicates to, while the first computing node is unavailable and for communications that would otherwise be directed to the first computing node, block the communications from being forwarded to intended final destinations of the communications, and wherein the initiating handling of the first communication in the determined alternative manner includes blocking the first communication from being provided to an intended final destination for the first communication.

26. The system of claim 22 wherein the configuration information includes a specified network topology for the virtual computer network that indicates the first computing node is located between the sending computing node and an intended final destination for the first communication, and wherein the determining to use the first computing node as the intermediate destination for the first communication is based on the specified network topology and is performed before forwarding the first communication over a substrate network on which the virtual computer network is overlaid.

27. The system of claim 22 wherein the software instructions further configured the at least one processors to, after the initiating handling of the first communication, determine that the first computing node is available, and initiating forwarding a second communication to the first computing node as an intermediate destination for the second communication.