Using virtual networking devices to manage network configuration

• US 9,900,214 B2
• Filed: 11/30/2015
• Issued: 02/20/2018
• Est. Priority Date: 12/07/2009
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Miller, Kevin Christopher, Brandwine, Eric Jason, Doane, Andrew J.
• Primary Examiner(s): Nguyen, Tammy
• Application Number:
  US14/954,734
• Publication Number:
  US 20160087840A1
• Time in Patent Office: 813 Days
• Field of Search: 709223, 709229, 455507, 726 15
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/122 of virtualised topologies, e.g. software-defined networks [SDN] or network function virtualisation [NFV]
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/02 Topology update or discovery

Abstract

Techniques are described for providing managed virtual computer networks that may have a configured logical network topology with one or more virtual networking devices, with corresponding networking functionality provided for communications between multiple computing nodes of the virtual computer network by emulating functionality that would be provided by the networking devices if they were physically present. In some situations, the emulating of networking device functionality includes receiving routing communications directed to the networking devices and using included routing information to update the configured network topology for the managed computer network. In addition, the techniques may further include supporting interactions with devices that are external to the virtual computer network, including remote physical networking devices that are part of a remote computer network configured to interoperate with the virtual computer network, and/or specialized network devices that are accessible via a substrate network on which the virtual computer network is overlaid.

Claims

1. A computer-implemented method, comprising:

providing, by a service provider, a virtual network for a customer of the service provider using computing resources of the service provider, including selecting a host computing system of the service provider to run a virtual machine in the virtual network;

configuring, by at least one computing system of the service provider, the host computing system to run the virtual machine in the virtual network, including storing configuration information about the virtual network on the host computing system to configure a communication manager executing on the host computing system to emulate functionality of the virtual network by modifying communications for the virtual network involving the virtual machine;

receiving, by the communication manager executing on the host computing system, network routing information indicating how to route communications to a remote computing system external to the virtual network; and

updating, based at least in part on the received network routing information, the configuration information stored on the host computing system, to further configure the communication manager to emulate functionality of the virtual network for communications between the virtual machine and the remote computing system.

2. The computer-implemented method of claim 1 further comprising forwarding, by the communication manager and based at least in part on the updated configuration information, one or more communications from the virtual machine to the remote computing system.

3. The computer-implemented method of claim 1 wherein the virtual machine is one of multiple nodes of the virtual network, and wherein the method further comprises modifying, by the communication manager, one or more communications sent to the virtual machine from one or more other of the multiple nodes that are on other host computing systems provided by the service provider, the modifying including adding information to the modified communications as part of the emulating of the functionality of the virtual network.

4. The computer-implemented method of claim 1 further comprising modifying one or more communications sent from the virtual machine to one or more virtual machines on other host computing systems provided by the service provider, wherein the modifying is performed by the communication manager before forwarding the modified communications over an underlying network on which the virtual network is overlaid.

5. The computer-implemented method of claim 4 further comprising receiving configuration information for the virtual network that specifies a virtual router device for the virtual network, and wherein the modifying of the one or more communications includes emulating functionality of the virtual router device by adding information to the modified communications that would have been added to the communications by a physical router device forwarding the modified communications.

6. The computer-implemented method of claim 1 wherein the receiving of the network routing information includes receiving, by one or more configured computing systems of the service provider, one or more routing communications directed to a virtual router device specified for the virtual network, extracting the network routing information from the one or more routing communications, and preventing further forwarding of the one or more routing communications.

7. The computer-implemented method of claim 1 wherein the receiving of the network routing information is performed by the communication manager and includes receiving one or more routing communications directed to the virtual machine, extracting the network routing information from the one or more routing communications, and preventing further forwarding of the one or more routing communications.

8. The computer-implemented method of claim 1 further comprising executing, on the host computing system and before the receiving of the network routing information, one or more software programs to implement the communication manager.

9. A non-transitory computer-readable medium having stored contents that cause a host computing system of a service provider to:

execute, on the host computing system, a virtual machine as a node of a virtual network that is provided for a customer of the service provider using configuration information specified for the virtual network;

receive, by a communication manager on the host computing system that is configured to emulate functionality of the virtual network in accordance with the configuration information for communications to and from the virtual machine, network routing information indicating how to route communications to a remote computing system external to the virtual network; and

update, by the communication manager and based at least in part on the received network routing information, the configuration information used for providing the virtual network.

10. The non-transitory computer-readable medium of claim 9 wherein the stored contents include software instructions that, when executed by the host computing system, further cause the host computing system to forward one or more communications from the virtual machine to the remote computing system using the updated configuration information.

11. The non-transitory computer-readable medium of claim 10 wherein the stored contents further cause the host computing system to:

provide, by the service provider, the virtual network for the customer using computing resources of the service provider, including selecting the host computing system to run the virtual machine, and storing information on the host computing system about multiple nodes of the virtual network to configure the communication manager on the host computing system to emulate functionality of the virtual network by modifying communications between the virtual machine and other nodes of the virtual network; and

emulate, as part of the modifying of the communications functionality of one or more virtual router devices specified in the configuration information as part of a network topology for the virtual network.

12. The non-transitory computer-readable medium of claim 11 wherein the stored contents further cause the host computing system to analyze the received network routing information to determine one or more changes to the network topology for the virtual network, and wherein the updating of the configuration information includes updating the information stored on the host computing system to reflect the determined one or more changes to the network topology.

13. The non-transitory computer-readable medium of claim 9 wherein the remote computing system is part of a remote computer network of the customer, and wherein the network routing information is received from the remote computer network and includes routing information for the remote computer network.

14. The non-transitory computer-readable medium of claim 13 wherein the stored contents include software instructions that, when executed by the host computing system, further cause the host computing system to establish a connection between the virtual network and the remote computer network, and wherein the one or more routing communications are received via the established connection.

15. The non-transitory computer-readable medium of claim 9 wherein the configuration information specified for the virtual network is received from the customer via a programmatic interface provided by the service provider for use by multiple customers.

16. A system comprising:

one or more processors of one or more computing systems; and

one or more memories having stored instructions that, when executed by at least one of the one or processors, cause the system to;

execute, on a host computing system of a service provider, a virtual machine as a node of a virtual network that is provided for a customer of the service provider using configuration information specified by the customer;

receive, by a communication manager on the host computing system that is configured to emulate functionality of the virtual network in accordance with the configuration information by modifying communications of the virtual machine, network routing information identifying a remote computing system external to the virtual network; and

update, by the communication manager and based at least in part on the received network routing information, the configuration information used for providing the virtual network.

17. The system of claim 16 wherein the one or more computing systems include the host computing system, and wherein the stored instructions further cause the system to forward, by the communication manager and based at least in part on the updated configuration information, one or more communications from the virtual machine to the remote computing system.

18. The system of claim 16 wherein the virtual machine is one of multiple nodes of the virtual network, and wherein the stored instructions further cause the system to:

store information on the host computing system about the multiple nodes to configure the communication manager on the host computing system to emulate the functionality of the virtual network by modifying communications between the virtual machine and other nodes of the virtual network; and

modify, under control of the communication manager and as part of the emulating of the functionality of the virtual network, one or more communications sent between the virtual machine and one or more of the other that are provided by the service provider,

and wherein the updating of the configuration information includes updating the information stored on the host computing system, to further configure the communication manager to emulate functionality of the virtual network for communications between the virtual machine and the remote computing system.

19. The system of claim 16 wherein the stored instructions further cause the system to:

provide, by the service provider, the virtual network for the customer using computing resources of the service provider, including selecting the host computing system to run the virtual machine, and configuring the host computing system to provide functionality of the virtual machine and of the communication manager; and

modify one or more communications sent from the virtual machine to one or more other virtual machines on other host computing systems provided by the service provider, and wherein the modifying of the one or more communications is performed under control of the communication manager before forwarding the modified communications over an underlying network on which the virtual network is overlaid.

20. The system of claim 16 wherein the stored instructions further cause the system to receive configuration information for the virtual network that specifies a virtual router device for the virtual network, and wherein the modifying of the communications includes emulating functionality of the virtual router device by changing information in the modified communications that would have been changed if a physical router device had forwarded the modified communications.

21. The system of claim 16 wherein the network routing information includes a range of network addresses used by one or more computing systems in a remote computer network of the customer, and wherein the stored instructions further cause the system to configure the communication manager to forward, to the remote computer network, communications from the virtual machine to the network addresses in the range.

22. The system of claim 21 wherein the network routing information further includes network cost information for the range of network addresses, and wherein the stored instructions further cause the system to determine one or more best paths to the remote computer network based at least in part on the network cost information, and to configure one or more edge devices of the service provider to use the determined one or more best paths for the forwarding of the communications from the virtual machine to the network addresses in the range.

23. The system of claim 16 wherein the network routing information includes a publicly accessible IP (Internet Protocol) address for the remote computing system, and wherein the stored instructions further cause the system to use the publicly accessible IP address to forward a communication from the virtual machine to the remote computing system over one or more public computer networks separating the service provider and the remote computing system.