Managing communications between computing nodes

• US 9,253,211 B2
• Filed: 03/15/2013
• Issued: 02/02/2016
• Est. Priority Date: 03/31/2006
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Hoole, Quinton R., Paterson-Jones, Roland, Pinkham, Christopher C., Tobler, Benjamin, van Biljon, Willem R., Smit, Gabriel, Brown, Christopher
• Primary Examiner(s): Zhao, Wei
• Application Number:
  US13/843,287
• Publication Number:
  US 20130283176A1
• Time in Patent Office: 1,054 Days
• Field of Search: 370/389
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 12/1439 time-based
• CPC Class Codes: H04L 12/1442 at network operator level
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

Techniques are described for managing communications between multiple intercommunicating computing nodes, such as multiple virtual machine nodes hosted on one or more physical computing machines or systems. In some situations, users may specify groups of computing nodes and optionally associated access policies for use in the managing of the communications for those groups, such as by specifying which source nodes are allowed to transmit data to particular destinations nodes. In addition, determinations of whether initiated data transmissions from source nodes to destination nodes are authorized may be dynamically negotiated for and recorded for later use in automatically authorizing future such data transmissions without negotiation. This abstract is provided to comply with rules requiring an abstract, and it is submitted with the intention that it will not be used to interpret or limit the scope or meaning of the claims.

Claims

1. A computer-implemented method comprising:

providing, by one or more computing systems of a program execution service, an interface;

receiving, by the one or more computing systems and via the provided interface, one or more requests from a client of the program execution service, the received one or more requests including at least an indication of an operating system and configuration information that is related to executing the indicated operating system and that includes an indication of one or more geographical locations in which to execute the indicated operating system;

selecting, by the one or more configured computing systems, one or more computing nodes of the program execution service to use for execution of the indicated operating system, the one or more selected computing nodes being part of a larger plurality of computing nodes of the program execution service that are located in two or more distinct geographical locations, and the selecting of the one or more computing nodes being based at least in part on the indicated one or more geographical locations; and

causing, by the one or more computer systems, the one or more computing nodes to execute one or more instances of the indicated operating system within one or more virtual machines, the causing of the execution being based at least in part on the received configuration information.

2. The computer-implemented method of claim 1 wherein the provided interface includes a graphical user interface, and wherein the one or more requests are received via the graphical user interface.

3. The computer-implemented method of claim 1 wherein the provided interface includes an API (“

application programming interface”

), and wherein the receiving of the one or more requests are based on an invocation of the API by a remote computing system of the client.

4. The computer-implemented method of claim 1 wherein the received configuration information specifies a number of computing nodes of the program execution service to use for execution of the one or more virtual machines that run the one or more instances of the indicated operating system, and wherein the one or more selected computing nodes include the specified number of computing nodes.

5. The computer-implemented method of claim 1 wherein the received configuration information specifies a number of instances of the indicated operating system to execute, and wherein causing the one or more computing nodes to execute the one or more instances of the indicated operating system includes causing the one or more computing nodes to execute the specified number of instances of the indicated operating system within an equal number of virtual machines.

6. The computer-implemented method of claim 1 wherein the configuration information specifies at least one of a minimum number of instances of the indicated operating system to execute or a maximum number of instances of the indicated operating system to execute, and wherein causing the one or more computing nodes to execute the one or more instances of the indicated operating system is performed in accordance with the specified minimum and/or maximum number of instances.

7. The computer-implemented method of claim 1 wherein the received configuration information specifies one or more times at which to initiate the execution of the one or more instances of the indicated operating system, and wherein causing the one or more computing nodes to execute the one or more instances of the indicated operating system is performed in accordance with the specified one or more times.

8. The computer-implemented method of claim 1 wherein the received configuration information specifies one or more times at which to terminate the execution of the one or more instances, the method further comprising managing, by the one or more computer systems, the execution of the one or more virtual machines in accordance with the specified one or more times.

9. The computer-implemented method of claim 1 wherein the received configuration information specifies one or more criteria related to one or more computing-related resources to be used for executing the indicated operating system.

10. The computer-implemented method of claim 9 wherein the specified computing-related resource criteria relate to at least one of an indicated amount of memory, an indicated amount of processor usage, an indicated amount of network bandwidth, an indicated amount of disk space, or an indicated amount of swap space.

11. The computer-implemented method of claim 9 wherein the specified computing-related resource criteria relate to an indication of one or more amounts of computing-related resources to be used by the one or more virtual machines.

12. The computer-implemented method of claim 9 wherein the specified computing-related resource criteria include at least one of a minimum amount of one or more computing-related resources to be used for executing the indicated operating system or a maximum amount of one or more computing-related resources to be used for executing the indicated operating system.

13. The computer-implemented method of claim 1 wherein the one or more requests identify a user account, and the method further comprises determining that the user account is authorized to execute the indicated operating system.

14. The method of claim 1, further comprising:

generating, by the one or more computer systems, fee information for the execution of the one or more instances of the indicated operating system, the fee information based at least in part on an amount of time the one or more virtual machines are executed by the one or more computing nodes.

15. A non-transitory computer-readable medium having stored contents that configure a computing system to:

receive, via an interface of a program execution service, a request to run one or more instances of an image, the image including a program, and the request further including configuration information that is related to running the one or more instances and that includes an indication of one or more geographical locations in which at least some instances of the image are to be run;

select one or more computing nodes of the program execution service to host the one or more instances of the image, wherein the one or more instances are run using one or more virtual machines, wherein the one or more selected computing nodes are part of a plurality of computing nodes of the program execution service that are located in two or more distinct geographical locations, and wherein the selecting of the one or more computing nodes is based at least in part on the indicated one or more geographical locations; and

manage the one or more computing nodes selected to run the one or more virtual machines.

16. The non-transitory computer-readable medium of claim 15 wherein the provided interface includes a graphical user interface, and wherein the request is received via the graphical user interface.

17. The non-transitory computer-readable medium of claim 15 wherein the provided interface includes an API (“

application programming interface”

), and wherein the receiving of the request is based on an invocation of the API by a remote computing system.

18. The non-transitory computer-readable medium of claim 15 wherein the received configuration information specifies a number of computing nodes of the program execution service to use to run the image or a number of instances of the image to run.

19. The non-transitory computer-readable medium of claim 15 wherein the configuration information specifies a minimum number of instances of the image to run or a maximum number of instances of the image to run.

20. The non-transitory computer-readable medium of claim 15 wherein the received configuration information specifies one or more times at which to start running the one or more instances of the image or one or more times at which to terminate the one or more instances of the image.

21. The non-transitory computer-readable medium of claim 15 wherein the received configuration information specifies one or more criteria related to one or more computing-related resources to be used for running the one or more instances of the image, the specified criteria relating to an indicated amount of memory, an indicated amount of processor usage, an indicated amount of network bandwidth, an indicated amount of disk space, or an indicated amount of swap space.

22. The non-transitory computer-readable medium of claim 15, further comprising:

determining a fee for running the one or more instances of the image, the determined fee based at least in part on an amount of time the one or more instances were run.

23. A system, comprising:

one or more computing systems each having one or more processors; and

at least one memory, the memory including instructions that, upon execution by at least one of the one or more processors, cause the system to;

receive, via an interface provided for use in configuring execution of programs by a program execution service having a plurality of computing nodes located in multiple geographic locations, a request from a client, the received request including configuration information that indicates one or more geographical locations in which at least one indicated program is to be executed;

select, based at least in part on the indicated one or more geographical locations, multiple computing nodes of the program execution service to use for execution of the indicated program; and

manage execution of one or more instances of the indicated program by the selected multiple computing nodes on behalf of the client, the managing of the execution being based at least in part on the received configuration information.

24. The system of claim 23 wherein the provided interface includes an API (“

application programming interface”

), and wherein the receiving of the request is based on an invocation of the API by a remote computing system of the client.

25. The system of claim 23 wherein the received configuration information specifies at least one of a quantity of computing nodes of the program execution service to use for execution of the indicated program and a number of instances of the indicated program to execute.

26. The system of claim 23 wherein the received configuration information specifies at least one of one or more times at which to initiate the execution of one or more instances of the indicated program or one or more times at which to terminate the execution of one or more instances of the indicated program.

27. The system of claim 23 wherein the received configuration information specifies one or more criteria related to one or more computing-related resources to be used for executing the indicated at least one program, the specified criteria including at least one of an indicated amount of memory, an indicated amount of processor usage, an indicated amount of network bandwidth, an indicated amount of disk space, or an indicated amount of swap space.

28. The system of claim 23 wherein the managing of the execution includes initiating executing of the one or more instances of the at least one program by the selected computing nodes at a first time, and wherein the memory further includes instructions that, upon execution, cause the system to:

receive, via the provided interface at a second time that is later than the first time, additional configuration information from the client, the additional configuration information specifying one or more modifications related to executing the at least one program; and

responsive to receiving the additional configuration information, dynamically modify the execution of at least one of the one or more instances of the indicated at least one program.