Amazon Technologies, Inc.

Other

Andrew Hemstreet Redmon

Mark Edward Stalzer

Po-Chun Chen

Omer Hashmi

James Michael Lamanna

David Gonzales

Technologies are provided for expanding computer network route advertisements. A route expansion server can be configured to receive route advertisements from a router, generate an expanded route advertisement that includes additional network route information, and transmit the expanded route advertisement to another router. The route expansion server can receive a route advertisement from a network zone edge router, comprising a network address prefix. The route expansion server can look up one or more additional network address prefixes associated with the edge router and generate an expanded route advertisement message that indicates that the edge router is a potential next hop for the network address prefix and the one or more additional network address prefixes. The route expansion server can transmit the expanded route advertisement message to another router. In at least some embodiments, the route expansion server can generate different expanded route advertisement messages for different routers.

Network route expansion

A technology is described for updating an Autonomous System Number (ASN) in a Border Gateway Protocol (BGP) routing configuration. An example method may include receiving a request to update a BGP routing configuration on a gateway with an ASN associated with a customer. In response to the request, the BGP routing configuration on the gateway may be updated to replace a default ASN associated with a computing service provider with the ASN associated with the customer. The BGP routing configuration on the gateway may also be updated to allow the ASN associated with the customer to appear in an Autonomous System (AS) path at least twice, thereby allowing for BGP routes to be exchanged between gateways.

Border gateway protocol routing configuration

A system (and method) includes a plurality of compute devices configured to execute an endpoint node and a provisioning service. The endpoint node is configured to establish an encrypted communication channel over a public network. The provisioning service is configured to retrieve configuration parameters from a database. The configuration parameters define a security association for the encrypted communication channel and include an encryption key and an identifier of an encryption algorithm. The provisioning service is configured to transmit the configuration parameters to the endpoint node for use in implementation of a security association for the encrypted communication channel.

Growing community of inventors

Fairfax Station, VA, United States of America

Andrew Hemstreet Redmon