Interfaces to manage last-mile connectivity for direct network peerings

• US 9,723,072 B2
• Filed: 08/10/2015
• Issued: 08/01/2017
• Est. Priority Date: 11/29/2011
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Miller, Kevin Christopher, Lennon, David Brian, Doane, Andrew Jeffrey, Balasubramanian, Krishna P., Hall, Jeremy T.
• Primary Examiner(s): Shin, Kyung H
• Application Number:
  US14/822,757
• Publication Number:
  US 20150350314A1
• Time in Patent Office: 722 Days
• Field of Search: 709227, 709238, 709226, 709224, 370351
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/5006 Creating or negotiating SLA contracts, guarantees or penalties
• CPC Class Codes: H04L 41/5025 by proactively reacting to service quality change, e.g. by reconfiguration after service quality degradation or upgrade
• CPC Class Codes: H04L 41/5054 Automatic deployment of services triggered by the service manager, e.g. service implementation by automatic configuration of network components
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1091 Interfacing with client-server systems or between P2P systems
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Methods and apparatus for interfaces to manage last-mile connectivity and dynamic reconfiguration for direct network peerings. A system may include a data center, endpoint routers and a connectivity coordinator. The coordinator implements an interface defining connectivity operations. The coordinator receives a request for dedicated connectivity to data center resources, formatted according to the interface. The coordinator determines a connectivity provider to provide last-mile connectivity to the requester, and transmits a notification identifying the selected connectivity provider.

Claims

1. A system, comprising:

a provider network comprising;

a plurality of computing devices configured to implement a plurality of resources of the provider network, wherein a set of the plurality of resources of the provider network are allocated to a client of the provider network as a resource collection; and

a plurality of endpoint routers configured to provide a link from a respective one of the plurality of endpoint routers to the resource collection via a private connection over the provider network; and

one or more computing devices configured to implement a connectivity coordinator, wherein the connectivity coordinator is configured to;

implement an interface defining connectivity operations available to the client;

receive a connectivity request indicating a logically isolated network connection is desired to be established between a client network of the client and the resource collection of the provider network allocated to the client, wherein the request specifies a dedicated physical path from the client network to a particular endpoint router of the plurality of endpoint routers of the provider network that is to be used to establish the logically isolated network connection; and

initiate one or more configuration operations to allow traffic to flow from the client network to the resource collection in accordance with the request.

2. The system of claim 1, wherein the connectivity provider is further configured to:

receive an indication via the interface indicating that an additional logically isolated network connection is desired to be established between another client network of the client and the resource collection via the same dedicated physical path used to establish the logically isolated network connection; and

initiate one or more configuration operations to allow traffic to flow between the other client network and the resource collection over the additional logically isolated network connection via the same dedicated physical path.

3. The system of claim 2, wherein the client network is an internal network of the client that is not exposed to the public internet and wherein the additional client network is a perimeter network exposed to the public internet.

4. The system of claim 1, wherein the connectivity coordinator is further configured to generate one or more notifications to initiate the dedicated physical path from the client network to the particular endpoint router.

5. The system of claim 1, wherein the connectivity request further indicates a dedicated physical path from the client network to the resource collection is desired to be established, and wherein the connectivity coordinator is further configured to:

generate a notification comprising configuration information for establishing the dedicated physical path from the client network to the particular endpoint router of the provider network; and

subsequent to the dedicated physical path being established, initiate the one or more configuration operations to allow traffic to flow from the client network to the resource collection over the logically isolated network connection via the dedicated physical path.

6. The system of claim 5, wherein the connectivity request indicates another logically isolated network connection over another dedicated physical path from the client network to another endpoint router of the provider network is desired to be established, and wherein the connectivity coordinator is further configured to:

generate a notification comprising configuration information for establishing the other dedicated physical path from the client network to the other endpoint router of the provider network; and

subsequent to the other dedicated physical path being established, initiate one or more additional configuration operations to allow traffic to flow from the client network to the resource collection over a second logically isolated network connection via the other dedicated physical path, such that network traffic is allowed to flow between the resource collection and the client network over the logically isolated network connection and is allows to flow between the resource collection and the client network over the other logically isolated network connection.

7. The system of claim 1, wherein the one or more configuration operations to allow traffic to flow from the client network to the resource collection in accordance with the request comprise one or more virtual local area network (VLAN) operations or one or more Multi-Protocol Label Switching (MPLS) operations.

8. The system of claim 1 wherein the connectivity request comprises at least one of:

a virtual local area network (VLAN) tag or a border gateway protocol (BGP) autonomous system number (ASN).

9. A method comprising:

presenting a connectivity service to a client of a provider network, wherein the connectivity service is implemented on one or more computing devices, wherein the provider network comprises;

a plurality of computing devices configured to implement a plurality of resources of the provider network, wherein a set of the plurality of resources of the provider network are allocated to the client as a resource collection; and

a plurality of endpoint routers each configured to provide a link from a respective one of the plurality of endpoint routers to the resource collection of the client via a private connection over the provider network;

wherein, the client network is distinct from the provider network; and

receiving, by a connectivity coordinator implemented on one or more computers, a connectivity request indicating a logically isolated network connection is desired to be established between a client network of the client and the resource collection of the provider network allocated to the client, wherein the request specifies a dedicated physical path from the client network to a particular endpoint router of the provider network that is to be used to establish the logically isolated network connection; and

initiating, by the connectivity coordinator, one or more configuration operations to allow traffic to flow from the client network to the resource collection in accordance with the request.

10. The method of claim 9, further comprising:

receiving, by the connectivity coordinator, an indication indicating that an additional logically isolated network connection is desired to be established between another client network and the resource collection via the same dedicated physical path; and

initiating, by the connectivity coordinator, one or more additional configuration operations to allow traffic to flow between the other client network and the resource collection over the additional logically isolated network connection via the same dedicated physical path.

11. The method of claim 10, further comprising:

receiving network traffic, via the other client network, wherein the other client network is exposed to the public internet; and

forwarding the network traffic to the client network, wherein the client network is an internal network not exposed to the public internet, wherein the forwarded network traffic is forwarded from the other client network to the client network via the resource collection of the provider network allocated to the client.

12. The method of claim 9, further comprising:

prior to initiating by the connectivity coordinator one or more configuration operations to allow traffic to flow between the client network and the resource collection over the logically isolated network connection via the dedicated physical path, generating a notification comprising configuration information for establishing the dedicated physical path from the client network to the endpoint router of the provider network; and

subsequent to the dedicated physical path being established, initiating by the connectivity coordinator, one or more configuration operations to allow traffic to flow between the client network and the resource collection over the logically isolated network connection via the dedicated physical path.

13. The method of claim 9, wherein the one or more configuration operations to allow traffic to flow from the client network to the resource collection in accordance with the request comprise one or more virtual local area network (VLAN) operations or one or more Multi-Protocol Label Switching (MPLS) operations.

14. The method of claim 9, wherein the connectivity request comprises at least one of:

a virtual local area network (VLAN) tag or a border gateway protocol (BGP) autonomous system number (ASN).

15. A non-transitory computer-accessible storage medium storing program instructions that when executed on one or more processors implement a connectivity coordinator configured to:

present a connectivity service to a client of a provider network, wherein the provider network comprises;

a plurality of computing devices configured to implement a plurality of resources of the provider network, wherein a set of the plurality of resources of the provider network are allocated to the client as a resource collection; and

a plurality of endpoint routers each configured to provide a link from a respective one of the plurality of endpoint routers to the resource collection of the client via a private connection over the provider network;

wherein, the client network is distinct from the provider network; and

receive a connectivity request indicating a logically isolated network connection is desired to be established between a client network of the client and the resource collection allocated to the client, wherein the request specifies a dedicated physical path from the client network to a particular endpoint router of the plurality of endpoint routers of the provider network that is to be used to establish the logically isolated network connection; and

initiate one or more configuration operations to allow traffic to flow from the client network to the resource collection in accordance with the request.

16. The non-transitory computer-accessible storage medium of claim 15, wherein the connectivity coordinator is further configured to:

receive an indication indicating that an additional logically isolated network connection is desired to be established between another client network and the resource collection via the same dedicated physical path; and

initiate one or more additional configuration operations to allow traffic to flow between the other client network and the resource collection over the additional logically isolated network connection via the same dedicated physical path.

17. The non-transitory computer-accessible storage medium of claim 16, wherein the connectivity coordinator is further configured to configure the resource collection of the provider network to:

receive network traffic from the other client network, wherein the other client network is exposed to the public internet; and

forward the network traffic to the client network, wherein the client network is an internal network of the client not exposed to the public internet.

18. The non-transitory computer-accessible storage medium of claim 15, wherein the connectivity coordinator is further configured to:

prior to the one or more configuration operations to allow traffic to flow between the client network and the resource collection over the logically isolated network being initiated, generate a notification comprising configuration information for establishing the dedicated physical path from the client network to the endpoint router of the provider network; and

subsequent to establishment of the dedicated physical path, initiate the one or more configuration operations to allow traffic to flow between the client network and the resource collection over the logically isolated network connection via the dedicated physical path.

19. The non-transitory computer-accessible storage medium of claim 15, wherein the one or more configuration operations to allow traffic to flow from the client network to the resource collection in accordance with the request comprise one or more virtual local area network (VLAN) operations or one or more Multi-Protocol Label Switching (MPLS) operations.

20. The non-transitory computer-accessible storage medium of claim 15, wherein the connectivity request comprises at least one of:

a virtual local area network (VLAN) tag or a border gateway protocol (BGP) autonomous system number (ASN).