Managing integration of external nodes into provided computer networks

• US 9,973,379 B1
• Filed: 02/11/2013
• Issued: 05/15/2018
• Est. Priority Date: 03/31/2010
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Brandwine, Eric Jason, Miller, Kevin Christopher
• Primary Examiner(s): Zand, Davoud
• Application Number:
  US13/764,607
• Time in Patent Office: 1,919 Days
• Field of Search: 709220, 709223-224
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 41/08 Configuration management of networks or network elements address allocation H04L61/50
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements

Abstract

Techniques are described for managing communications for a managed virtual computer network overlaid on a distinct substrate computer network, including for communications between computing nodes of the managed virtual computer network connected to the substrate network and other network nodes external to the substrate network. The managed virtual computer network may have multiple associated virtual network addresses, with each of the computing nodes being associated with at least one of the virtual network addresses, and with one or more external network nodes being integrated into the managed virtual computer network based at least in part by associating one or more other of the virtual network addresses with the external network nodes. The managing of the communications may further include using one or more translation manager modules that interconnect the substrate network with one or more external networks or other external connections via which the external network nodes are accessible.

Claims

1. A non-transitory computer-readable medium having stored contents that cause a computing system of an online network service to:

obtain information for a virtual computer network having multiple computing nodes provided by the online network service, wherein the information indicates to include one or more external network nodes that are not provided by the online network service and are at an external location that is separate from and outside of a substrate network of the online network service on which the virtual computer network is overlaid;

associate, by the computing system of the online network service, one or more virtual network addresses for the virtual computer network with the one or more external network nodes to include the one or more external network nodes within the virtual computer network; and

manage, by the computing system of the online network service, a communication sent from one of the multiple computing nodes to one of the associated one or more virtual network addresses by;

determining that a module of the online network service in the substrate network is configured to manage communications for the one or more external network nodes; and

forwarding the communication over the substrate network to the module, to enable the module to further forward the communication outside the substrate network to at least one of the one or more external network nodes.

2. The non-transitory computer-readable medium of claim 1 wherein the stored contents further configure the computing system, before the managing of the communication, to select the one or more virtual network addresses to associate with the one or more external network nodes from a plurality of virtual network addresses for the virtual computer network, and to configure the module to map the associated one or more virtual network addresses to information corresponding to the external location outside of the substrate network, and wherein the forwarded communication includes an indication of the one associated virtual network address to which the communication is sent.

3. The non-transitory computer-readable medium of claim 1 wherein the stored contents further configure the computing system to manage a second communication sent to a destination virtual network address that is associated with one of the multiple computing nodes, the destination virtual network address being one of a plurality of virtual network addresses for the virtual computer network and being distinct from the associated one or more virtual network addresses, the managing of the second communication including forwarding the second communication over the substrate network to a location in the substrate network of the one computing node without forwarding the second communication to the module.

4. The non-transitory computer-readable medium of claim 3 wherein the second communication is encoded in a manner specific to the substrate network before the forwarding of the second communication, and is decoded after the forwarding of the second communication before the decoded second communication is provided to the one computing node.

5. The non-transitory computer-readable medium of claim 1 wherein the one or more external network nodes are separated from the substrate network via one or more intervening networks.

6. The non-transitory computer-readable medium of claim 5 wherein the module in the substrate network is a translation manager module, and wherein the communication is encoded in a manner specific to the substrate network before the forwarding of the communication to the translation manager module, and is decoded by the translation manager module before further forwarding the decoded communication over the one or more intervening networks to the at least one external network node.

7. The non-transitory computer-readable medium of claim 1 wherein the stored contents also configure the module to:

receive the forwarded communication, the received forwarded communication being encoded to include information specific to the substrate network;

decode the received forwarded communication to remove the information specific to the substrate network; and

further forward the decoded communication to the at least one external network node using an external network address that is associated with the at least one external network node.

8. The non-transitory computer-readable medium of claim 1 wherein the obtained information is configuration information that is specified by a client of the online network service on whose behalf the virtual computer network is provided by the online network service.

9. The non-transitory computer-readable medium of claim 8 wherein the configuration information indicates a plurality of virtual network addresses associated with the virtual computer network, and wherein the associated one or more virtual network addresses are a range of multiple virtual network addresses that are a subset of the plurality of virtual network addresses.

10. The non-transitory computer-readable medium of claim 1 wherein the one or more external network nodes include multiple external network nodes, wherein the associated one or more virtual network addresses include multiple virtual network addresses, and wherein the multiple external network nodes each has a distinct associated virtual network address that is one of the multiple virtual network addresses.

11. The non-transitory computer-readable medium of claim 1 wherein the associated one or more virtual network addresses include multiple virtual network addresses, wherein at least one of the multiple virtual network addresses is not assigned to any external network nodes, and wherein the stored contents further configure the computing system to manage an additional communication to the at least one virtual network address by forwarding the additional communication over the substrate network to the module for further forwarding of the additional communication to the external location.

12. The non-transitory computer-readable medium of claim 1 wherein the stored contents also configure the module to receive the forwarded communication and to determine not to perform further forwarding of the received forwarded communication to the at least one external network node.

13. The non-transitory computer-readable medium of claim 1 wherein the stored contents also configure the module to meter communications that are forwarded to the one or more external network nodes.

14. The non-transitory computer-readable medium of claim 1 wherein the stored contents also configure the module to perform further forwarding of the communication to the at least one external network node only if it is determined that the further forwarding satisfies a specified threshold of use of the at least one external network node.

15. The non-transitory computer-readable medium of claim 1 wherein the obtained information includes a specified network topology for the virtual computer network, wherein the virtual computer network is overlaid on the substrate network without physically implementing the specified network topology, and wherein the stored contents are instructions that, when executed, program the computing system.

16. A system, comprising:

one or more processors of one or more computing systems; and

one or more memories with stored instructions that, when executed by at least one of the one or more processors, cause the system to perform automated operations for an online network service having hardware resources at a first location to use in providing virtual computer networks to multiple clients, including;

providing, by the online network service, multiple computing nodes at the first location for use in a first virtual computer network that is provided for a first client and that is overlaid on one or more second networks provided by of the online network service at the first location,

assigning, by the online network service, a first virtual network address for the first virtual computer network to a first external network node to enable communications from the multiple computing nodes to be sent to the first external network node, wherein the first external network node is not provided by the online network service and is at an external location separated from the first location by one or more intervening computer networks; and

managing, by the online network service, a first communication sent by a first computing node of the multiple computing nodes to the first virtual network address, including;

determining to use a translation manager of the online network service that is connected to the one or more second networks to manage forwarding of the first communication to the first external network node;

encoding the first communication in a manner specific to the one or more second networks; and

forwarding the encoded first communication over the one or more second networks to the translation manager, to cause the translation manager to decode the encoded first communication and to further forward the decoded communication over the one or more intervening computer networks to the first external network node at the external location.

17. The system of claim 16 wherein the stored instructions include software instructions of a communication manager of the online network service that further cause the system to manage a second communication sent to a second virtual network address of the first virtual computer network, the second virtual network address being one of multiple virtual network addresses associated with the first virtual computer network for assignment to the multiple computing nodes, the managing of the second communication including:

encoding the second communication in a manner specific to the one or more second networks; and

forwarding the encoded second communication over the one or more second networks to one of the multiple computing nodes that is assigned to the second virtual network address, wherein the forwarding of the encoded second communication to the one computing node is performed without forwarding the second communication to the translation manager module and without forwarding the second communication over the one or more intervening computer networks.

18. The system of claim 17 wherein the forwarding of the encoded first communication to the translation manager includes sending the encoded first communication to a first substrate network address for the one or more second networks that corresponds to a location of the translation manager in the one or more second networks, and wherein the forwarding of the encoded second communication to the one computing node includes sending the encoded second communication to a second substrate network address for the one or more second networks that corresponds to a location of the one computing node in the one or more second networks.

19. The system of claim 17 further comprising additional stored instructions in the one or more memories to implement the translation manager, wherein the translation manager is associated with one or more external network nodes that include the first external network node and wherein the additional stored instructions, when executed by at least one processor of the one or more processors, further cause the system to:

receive the forwarded encoded first communication after it is forwarded over the one or more second networks;

decode the received encoded first communication to remove information specific to the one or more second networks; and

further forward the decoded communication outside the one or more second networks to the first external network node over the one or more intervening computer networks.

20. The system of claim 19 further comprising further stored instructions in the one or more memories to implement a system manager of the online network service and that, when executed by at least one of the one or more processors, further causes the system to:

obtain configuration information specified by the first client for use with the first virtual computer network, the configuration information including a specified network topology for the first virtual computer network;

configure the translation manager to manage communications between the first external network node and the multiple computing nodes of the first virtual computer network, including to map the first virtual network address to the first external network node to cause the first external network node to be included in the first virtual computer network; and

configure the communication manager to manage communications for the first virtual computer network involving the first computing node in a manner based in part on the specified network topology.

21. A computer-implemented method comprising:

obtaining, by a configured computing system of an online network service, information for a virtual computer network that is provided by the online network service for a client and that has multiple computing nodes provided by the online network service within a substrate network at a first location;

associating, by the configured computing system, one or more virtual network addresses for the virtual computer network with one or more external network nodes that are not provided by the online network service and that are at an external location separate from the first location and outside of the substrate network; and

managing, by the configured computing system, a communication sent from one of the multiple computing nodes to one of the associated one or more virtual network addresses by;

determining a module in the substrate network that manages communications for the one or more external network nodes; and

forwarding the communication over the substrate network to the module, to cause the module to further forward the communication outside the substrate network to at least one of the one or more external network nodes.

22. The method of claim 21 further comprising selecting the one or more virtual network addresses to associate with the one or more external network nodes from a plurality of virtual network addresses for the virtual computer network, and configuring the module to map the associated one or more virtual network addresses to information corresponding to the external location outside of the substrate network.

23. The method of claim 21 further comprising managing a second communication sent to a destination virtual network address that is associated with one of the multiple computing nodes, the destination virtual network address being one of a plurality of virtual network addresses for the virtual computer network and being distinct from the associated one or more virtual network addresses, the managing of the second communication including forwarding the second communication over the substrate network to a location in the substrate network of the one computing node without forwarding the second communication to the module.

24. The method of claim 21 wherein the one or more external network nodes are separated from the substrate network via one or more intervening networks that are not provided by the online network service, wherein the module in the substrate network is a translation manager module provided by the online network service, and wherein the communication is encoded in a manner specific to the substrate network before the forwarding of the communication to the translation manager module, and is decoded by the translation manager module before further forwarding the decoded communication over the one or more intervening networks to the at least one external network node.

25. The method of claim 21 wherein the obtained information is configuration information that is specified by the client and that indicates a specified network topology for the virtual computer network, and wherein the method further comprises overlaying the virtual computer network on the substrate network without physically implementing the specified network topology.