Managing use of alternative intermediate destination computing nodes for provided computer networks

• US 9,282,027 B1
• Filed: 03/31/2010
• Issued: 03/08/2016
• Est. Priority Date: 03/31/2010
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Brandwine, Eric Jason, Miller, Kevin Christopher
• Primary Examiner(s): Kim, Edward
• Application Number:
  US12/752,055
• Time in Patent Office: 2,169 Days
• Field of Search: 709201-203, 709223-229, 709230-235, 709238-244
• US Class Current: 1/1
• CPC Class Codes: H04L 12/1836 with heterogeneous network architecture
• CPC Class Codes: H04L 12/1886 with traffic restrictions for efficiency improvement, e.g. involving subnets or subdomains
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/122 of virtualised topologies, e.g. software-defined networks [SDN] or network function virtualisation [NFV]
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 45/16 Multipoint routing
• CPC Class Codes: H04L 45/22 Alternate routing

Abstract

Techniques are described for managing communications for a managed computer network by using a defined pool of alternative computing nodes of the managed computer network that are configured to operate as intermediate destinations to handle at least some communications that are sent by and/or directed to one or more other computing nodes of the managed computer network. For example, a manager module associated with a source computing node may select a particular alternative intermediate destination computing node from a defined pool to use for one or more particular communications from the source computing node to an indicated final destination, such as based on a configured logical network topology for the managed computer network and/or on one or more other selection criteria (e.g., to enable load balancing between the alternative computing nodes). The manager module then forwards those communications to the selected intermediate destination computing node for further handling.

Claims

1. A computer-implemented method comprising:

receiving, by one or more programmed computing systems of a configurable network service that provides virtual computer networks to customers, configuration information from a first customer for a first virtual computer network having multiple computing nodes, the configuration information including a specified network topology for the first virtual computer network that includes two or more of the multiple computing nodes being part of a pool of alternative computing nodes for use as intermediate destinations of at least some communications for the first virtual computer network; and

providing, by the one or more programmed computing systems, the first virtual computer network for the first customer in accordance with the received configuration information by overlaying the first virtual computer network on a distinct substrate network without physically implementing the specified network topology for the first virtual computer network, the providing of the first virtual computer network including;

before forwarding a first communication over the substrate network from a source computing node of the first virtual computer network to a destination computing node of the virtual computer network, selecting, based at least in part on the specified network topology, one of the alternative computing nodes of the pool to use as an intermediate destination for the first communication; and

forwarding the first communication over the substrate network from the source computing node to the selected one computing node of the pool, to enable that selected one computing node to manage further forwarding of the first communication to the destination computing node.

2. The method of claim 1 further comprising, after the forwarding of the first communication over the substrate network to the selected one computing node of the pool, and if the selected one computing node of the pool determines to initiate further forwarding of the first communication to the destination computing node, further forwarding the first communication over the substrate network from the selected one computing node of the pool to the destination computing node.

3. The method of claim 1 wherein the pool of alternative computing nodes has one or more associated modification criteria, and wherein the method further comprises:

determining, by the one or more programmed computing systems, that at least one of the one or more associated modification criteria for the pool is satisfied; and

modifying, by the one or more programmed computing systems, the computing nodes that are part of the pool based at least in part on the at least one satisfied modification criteria.

4. The method of claim 3 wherein the one or more associated modification criteria are specified by the first customer as part of the received configuration information for the first virtual computer network, wherein the determining that the at least one modification criteria is satisfied includes monitoring at least some of the alternative computing nodes of the pool, and wherein the at least one modification criteria is satisfied based at least in part on information obtained from the monitoring.

5. The method of claim 3 wherein the at least one satisfied modification criteria indicates to increase the alternative computing nodes that are part of the pool based on demand increasing for functionality provided by the alternative computing nodes of the pool, and wherein the modifying of the alternative computing nodes that are part of the pool includes adding one or more computing nodes for the first virtual computer network to the pool.

6. The method of claim 3 wherein the at least one satisfied modification criteria indicates to decrease the alternative computing nodes that are part of the pool, and wherein the modifying of the alternative computing nodes that are part of the pool includes removing one or more computing nodes from the pool.

7. The method of claim 1 wherein the alternative computing nodes of the pool provide one or more specified types of processing on the first communication, the one or more specified types of processing including at least one of firewall capabilities, intrusion detection capabilities, content analysis capabilities, network acceleration capabilities, communication format modification capabilities, or virtual private network (“

VPN”

) connection capabilities, and wherein the selecting of the one computing node of the pool for the first communication is further based at least in part on one or more selection criteria related to performing load balancing between the alternative computing nodes of the pool.

8. The method of claim 1 wherein the configuration information further specifies that the computing nodes of the pool separate two or more specified logical subnets of the first virtual computer network, and wherein the source computing node and the destination computing node are part of distinct logical subnets.

9. The method of claim 1 further comprising, under control of the selected one computing node, receiving the forwarded first communication from the source one computing node, and performing the managing of the further forwarding of the first communication to the destination computing node by determining not to further forward the first communication to the at least one destination computing node.

10. The method of claim 1 wherein the configurable network service provides multiple other virtual computer networks to multiple other clients, and wherein the configurable network service provides a plurality of computing nodes for use by the first virtual computer network and by the multiple other virtual computer networks.

11. A non-transitory computer-readable storage medium having stored contents that configure a computing system of a configurable network service to:

obtain, by the configured computing system, configuration information from a first customer of the configurable network service regarding a first virtual computer network having multiple computing nodes, the configuration information indicating that the first virtual computer network has a network topology including first and second logical subnets and that the multiple computing nodes include a specified group of two or more computing nodes located between the first and second logical subnets; and

provide the first virtual computer network for the first customer in accordance with the configuration information, the providing of the first virtual computer network including managing a communication sent by a source computing node of the first logical subnet to a destination computing node of the second logical subnet by;

selecting, by the configured computing system, one of the computing nodes of the specified group to use as an intermediate destination for the communication based at least in part on the network topology; and

after the selecting of the computing node, forwarding the communication over a substrate network from the source computing node to the selected computing node, to enable the use of the selected computing node as the intermediate destination for the communication before the communication is further forwarded to the destination computing node.

12. The non-transitory computer-readable storage medium of claim 11 wherein the first virtual computer network is overlaid on the substrate network without physically implementing the specified network topology for the first virtual computer network, and wherein the stored contents include software instructions that, when executed, further configure the computing system to:

determine, by the configured computing system, to modify a quantity of the computing nodes that are part of the specified group based on one or more modification criteria associated with the specified group; and

modify, by the configured computing system, the quantity of the computing nodes that are part of the specified group in response to the determining.

13. The non-transitory computer-readable storage medium of claim 12 wherein the determining to modify the quantity of the computing nodes that are part of the specified group includes determining that the specified group includes at least one computing node that is not currently needed, and wherein the modifying of the computing nodes of the specified group includes removing the at least one computing node from the specified group.

14. The non-transitory computer-readable storage medium of claim 12 wherein the providing of the first virtual computer network further includes managing one or more additional communications sent between computing nodes of the first logical subnet by forwarding each of the additional communications to a destination computing node without forwarding the additional communications to any of the computing nodes of the specified group.

15. The non-transitory computer-readable storage medium of claim 11 wherein the providing of the first virtual computer network further includes managing multiple additional communications sent from the source computing node to the destination computing node by selecting a single computing node of the specified group to use for the multiple additional communications, and by forwarding each of the multiple additional communications over the substrate network from the source computing node to the selected single computing node.

16. The non-transitory computer-readable storage medium of claim 11 wherein the stored contents include software instructions that, when executed, further configure the computing system to, after the communication is forwarded from the source computing node to the selected computing node, determine to not perform further forwarding of the communication to the destination computing node.

17. The non-transitory computer-readable storage medium of claim 11 wherein the selecting of one of the computing nodes of the specified group to use as the intermediate destination for the communication is based at least in part on the destination network address included in the communication.

18. The non-transitory computer-readable storage medium of claim 11 wherein the selecting of one of the computing nodes of the specified group to use as the intermediate destination for the communication is based at least in part on one or more attributes of the communication distinct from the destination network address included in the communication.

19. The non-transitory computer-readable storage medium of claim 18 wherein the one or more attributes of the communication include at least one of a networking protocol used for the communication, of a port number indicated for the communication, of a source network address indicated for the communication, or of quality of service information indicated for the communication.

20. The non-transitory computer-readable storage medium of claim 11 wherein the selecting of one of the computing nodes of the specified group to use as the intermediate destination for the communication is based at least in part on weighting information associated with the selected one computing node relative to other of the computing nodes of the specified group.

21. The non-transitory computer-readable storage medium of claim 11 wherein the stored contents include software instructions that, when executed, further configure the computing system to meter a quantity of multiple communications that are forwarded to the computing nodes of the selected group for use as intermediate destinations for those communications.

22. The non-transitory computer-readable storage medium of claim 11 wherein the configuration information includes information about a threshold of use of the computing nodes of the specified group as intermediate destinations for communications, and wherein the selecting of one of the computing nodes of the specified group to use as the intermediate destination for the communication includes determining that the use of the selected computing node satisfies the threshold of use.

23. The non-transitory computer-readable storage medium of claim 11 wherein the specified group of computing nodes has a threshold of use based at least in part on a capacity of the computing nodes of the specified group for operating as intermediate destinations, and wherein the selecting of one of the computing nodes of the specified group to use as the intermediate destination for the communication includes determining that the use of the selected computing node satisfies the threshold of use.

24. The non-transitory computer-readable storage medium of claim 11 wherein the stored contents include software instructions that, when executed, further configure the computing system to determine one of the computing nodes of the specified group that is not available to act as an intermediate destination for the first virtual computer network, and to inhibit future selections of that determined one computing node as an intermediate destination.

25. A computing system, comprising:

one or more processors; and

one or more modules that are configured to, when executed by at least one of the one or more processors, manage a communication for a first virtual computer network provided by a configurable network service in accordance with network topology information specified by a first customer of the configurable network service, the specified network topology indicating a group of two or more computing nodes for use as alternative intermediate destinations of at least some communications for the first virtual computer network, the managing of the communication including;

determining, based at least in part on the specified network topology information, to use one of the computing nodes of the group as an intermediate destination for the communication before the communication is forwarded to an indicated final destination;

forwarding the communication from a source computing node of the first virtual computer network to the one computing node of the group, to enable the one computing node to manage further handling of the communication before further forwarding of the communication to the indicated final destination; and

after the forwarding of the communication, determining to modify a quantity of the two or more computing nodes in the group based at least in part on configuration information previously specified by the first customer, and initiating a modification to the quantity in response to the determining.

26. The computing system of claim 25 wherein the first virtual computer network is overlaid on one or more second networks without physically implementing the specified network topology for the first virtual computer network, and wherein the determining to use the one computing node as the intermediate destination for the communication includes dynamically selecting the one computing node from the two or more computing nodes of the group based at least in part on one or more selection criteria.

27. The computing system of claim 26 wherein the one or more modules include software instructions that, when executed by the one or more processors, further configure the one or more modules to:

obtain additional configuration information from the first customer that includes the specified network topology for the first virtual computer network and indicates the one or more selection criteria and indicates that the two or more computing nodes are part of a pool located between at least first and second groups of computing nodes; and

forward a second communication between at least two computing nodes of the first group without forwarding the second communication to any of the computing nodes of the pool,

and wherein the communication is sent between the and second groups.

28. The computing system of claim 27 wherein the second group includes at least one of one or more computing nodes that are not part of the first virtual computer network, of one or more computing nodes at one or more second locations remote from a first location of computing nodes of the first group, or of one or more computing nodes of the first virtual computer network that are part of a specified second logical subnet of the first virtual computer network that is distinct from a specified first logical subnet of the first virtual computer network for the first group.

29. The computing system of claim 25 wherein the determining to use the one computing node as the intermediate destination for the communication is performed to balance a load of network traffic between the two or more computing nodes of the group and is performed before the forwarding of the communication to the one computing node of the group.

30. The computing system of claim 25 further comprising the two or more computing nodes of the group, the two or more computing nodes being configured to operate as alternatives that each receive multiple communications intended for other indicated final destinations and handle those multiple communications by performing specified processing on each of those multiple communications, wherein the specified processing performed on the communication includes determining to not further forward the communication to the indicated final destination.

31. The computing system of claim 25 wherein the one or more modules consist of a means for performing the managing of the communication for the first virtual computer network in accordance with the specified network topology information.