Interfaces to manage direct network peerings

• US 8,724,642 B2
• Filed: 11/29/2011
• Issued: 05/13/2014
• Est. Priority Date: 11/29/2011
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Miller, Kevin Christopher, Doane, Andrew J., Abuelela, Mahmoud A., Furr, Michael B.
• Primary Examiner(s): Yuen, Kan
• Application Number:
  US13/306,775
• Publication Number:
  US 20130136138A1
• Time in Patent Office: 896 Days
• Field of Search: 370229-235, 370241-252, 370/401, 709/238
• US Class Current: 370/401
• CPC Class Codes: H04L 12/1435 volume-based
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor
• CPC Class Codes: H04L 41/0896 Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities flow or congestion control using dynamic resource allocation, e.g. in-call renegotiation, H04L47/76
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Methods and apparatus for interfaces to manage direct network peerings. A system may include a data center, endpoint routers and a connectivity coordinator. The coordinator implements a programmatic interface defining connectivity operations. The coordinator receives a request for dedicated connectivity to data center resources, formatted according to the interface. The coordinator selects a target endpoint router at which to establish a physical link to implement the dedicated connectivity, and transmits a response identifying the target endpoint router and including configuration instructions for setting up a physical link for the dedicated connectivity.

Claims

1. A system, comprising:

a data center including a resource collection designated to respond to service requests received from a client;

a plurality of endpoint routers linked to the data center by one or more private network paths; and

a connectivity coordinator;

wherein the connectivity coordinator is operable to;

implement an interface defining connectivity operations available to the client, wherein the connectivity operations pertain to network connectivity enabling the client to access the resource collection in the data center, wherein the connectivity operations include at least one of an operation to set up a connection, an operation to query about a connection, an operation to modify a connection, or an operation to take down a connection;

receive a connectivity request from the client for dedicated connectivity to the resource collection, wherein the connectivity request is formatted in accordance with the interface;

in response to the connectivity request,

select a target endpoint router of the plurality of endpoint routers, wherein the target endpoint router is configurable to provide a route over a private network path of the one or more private network paths in accordance with the connectivity request to provide the client access to the resource collection in the data center;

generate a reply comprising configuration instructions for a physical network link to be established to the target endpoint router to provide at least a portion of the dedicated connectivity for the client to access the resource collection in the data center; and

transmit the reply to the client including the configuration instructions for the physical network link.

2. The system as recited in claim 1, wherein the interface comprises at least one of:

an application programming interface (API), a graphical user interface (GUI), or a command-line interface.

3. The system as recited in claim 1, wherein the target endpoint router is housed within a facility requiring authorization for physical access, and wherein the reply includes an indication of an authorization of physical access to the target endpoint router at the facility.

4. The system as recited in claim 1, wherein the connectivity coordinator is further operable to:

receive an isolation request from the client to establish a logically isolated network path to the resource collection via the physical link; and

implement a network isolation mechanism to establish the logically isolated network path in accordance with the isolation request.

5. The system as recited in claim 4, wherein the network isolation mechanism comprises at least one of:

a virtual local area network (VLAN) mechanism or a Multi-Protocol Label Switching (MPLS) technique.

6. The system as recited in claim 1, wherein the connectivity coordinator is further operable to:

receive, from the client, identification information of a network device to be used to transmit network traffic of the client to the resource collection; and

provide, to the client, one or more configuration instructions for the network device based on the identification information.

7. A method, comprising:

presenting a connectivity service to a client of a provider network, wherein said connectivity service includes a connectivity coordinator implementing a programmatic interface defining connectivity operations available to the client, wherein the connectivity operations pertain to network connectivity enabling the client to access a resource collection of the provider network, wherein the connectivity operations include at least one of an operation to set up a connection, an operation to query about a connection, an operation to modify a connection, or an operation to take down a connection;

receiving, at the connectivity coordinator, a connectivity request for dedicated connectivity to the resource collection of the provider network, wherein the connectivity request is formatted in accordance with the interface;

in response to the connectivity request,

selecting a target endpoint router of a plurality of endpoint routers of the provider network, wherein the target endpoint router is configurable to provide a route over a private network to the resource collection in accordance with the connectivity request to provide the client access to the resource collection;

generating a notification comprising configuration information for a physical network link to be established to the target endpoint router to provide at least a portion of the dedicated connectivity for the client to access the resource collection; and

transmitting the notification including the configuration information for the physical network link.

8. The method as recited in claim 7, further comprising:

receiving identification information of a network device to be used to transmit network traffic of the client to the resource collection; and

providing one or more configuration instructions for the network device based on the identification information.

9. The method as recited in claim 7, wherein the resource collection comprises a plurality of resources, further comprising:

receiving one or more selection criteria identifying a subset of the plurality of resources to which an isolated connection is to be provided over the physical network link; and

routing network traffic in accordance with the selection criteria.

10. The method as recited in claim 9, wherein a selection criteria of the one or more selection criteria comprises a virtual local area network (VLAN) tag.

11. The method as recited in claim 7, wherein the target endpoint router is housed within a facility requiring authorization for physical access, and wherein the notification includes an indication of an authorization of physical access to the target endpoint router at the facility.

12. The method as recited in claim 7, wherein transmitting the notification comprises sending the notification to an operator of a facility at which the target endpoint router is housed.

13. A non-transitory computer-accessible storage medium storing program instructions that when executed on one or more processors:

implement a programmatic interface defining connectivity operations available to a client of a provider network, wherein the connectivity operations pertain to network connectivity enabling the client to access a resource collection of the provider network, wherein the connectivity operations include at least one of an operation to set up a connection, an operation to query about a connection, an operation to modify a connection, or an operation to take down a connection;

receive a connectivity request from the client for dedicated connectivity to the resource collection of the provider network, wherein the connectivity request is formatted in accordance with the interface;

in response to the connectivity request,

generate a notification comprising configuration information for a physical network link to be established to a target endpoint router of the provider network to provide at least a portion of the dedicated connectivity for the client to access the resource collection, wherein the target endpoint router is configurable to provide a route over a private network path to the resource collection in accordance with the connectivity request to provide the client access to the resource collection; and

transmit the notification including the configuration information for the physical network link.

14. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the program instructions when executed on the one or more processors:

after the physical network link has been established, transmit a confirmation message indicating that the dedicated connectivity has been provided.

15. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the configuration information comprises at least one of:

a physical port of the target endpoint router, a rack identifier, a cage identifier or a patch panel identifier.

16. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the connectivity request comprises one or more of:

a bandwidth requirement, an availability requirement, or a requirement for a plurality of physical paths to the resource collection.

17. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the program instructions when executed on the one or more processors:

receive identification information of a network device to be used to transmit network traffic of the client to the resource collection; and

provide one or more configuration instructions for the network device based on the identification information.

18. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the resource collection comprises a plurality of resources, wherein the program instructions when executed on the one or more processors:

receive one or more selection criteria identifying a subset of the plurality of resources to which an isolated connection is to be provided over the physical network link; and

generate routing information to route network traffic in accordance with the selection criteria.

19. The non-transitory computer-accessible storage medium as recited in claim 18, wherein a selection criteria of the one or more selection criteria comprises a virtual local area network (VLAN) tag.

20. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the target endpoint router is housed within a facility requiring authorization for physical access, and wherein the notification includes an indication of an authorization of physical access to the target endpoint router at the facility.

21. The non-transitory computer-accessible storage medium as recited in claim 13, wherein the configuration information comprises an identification of a physical location of the target endpoint router.