Amazon Technologies, Inc.

Benjamin Wojtowicz

Diwakar Gupta

Upendra Bhalchandra Shevade

Ximeng Simon Yang

Ishwardutt Parulkar

Kaixiang Hu

Shane Ashley Hall

Nikolay Krasilnikov

Theodore Joseph Maka'iwi DeRego

Kiran Kumar Edara

Igor A Kostic

Yuan-An Liu

Disclosed are various embodiments for automated deployment and management of distributed units (DUs) in a radio-based network. In one embodiment, it is determined to deploy a radio-based network at least partially using infrastructure of a cloud provider network. A radio access network (RAN)-enabled edge server of the cloud provider network is deployed to a physical location of the radio-based network. The RAN-enabled edge server is configured to perform a set of distributed unit (DU) functions for the radio-based network.

Automated deployment and management of distributed units in radio-based networks

At a radio-based application pipeline processing server at which a portion of a distributed unit (DU) of a radio-based application is implemented, a particular networking hardware device is selected from among several devices (which include least one device incorporated within a network function accelerator card and at least one device which is not part of an accelerator card) for transmission of at least a portion of mid-haul traffic to a centralized unit (CU). The mid-haul traffic is transmitted to the CU via the selected device. At least a portion of front-haul traffic is transmitted to a radio unit (RU) via a networking hardware device incorporated within a network function accelerator card of the server.

Network traffic management at radio-based application pipeline processing servers

Systems and methods are described for implementing an event tracing system for an open radio access network ('RAN'). A RAN implementation may be distributed across multiple components, including both special-purpose components such as radio units and general purpose components such as local or cloud-based servers. A RAN event tracing system may thus be used to troubleshoot issues with the RAN implementation by collecting information from distributed components regarding events that occur on these components during the translation of data into radio signals and vice versa. The RAN event tracing system may be used to search for events associated with a particular identifier, such as a radio network temporary identifier, and to display representations of radio frames that were generated by the components and display information regarding the events that led to the placement of particular resource elements onto the radio frames.

Radio access network event tracing system

Respective network addresses are assigned to a networking hardware device and a network function accelerator incorporated within an offloading card of a virtualization server by a control plane server of a virtualized computing service. A compute instance is launched at the virtualization server using a virtualization controller of the offloading card. The compute instance executes a network function of a radio-based application in response to a request received using the network address assigned to the hardware device, and requests execution of a second network function at the accelerator. The result of the second network function is sent to a radio unit of the application using the address assigned to the accelerator.

Managing network function accelerators for radio-based applications from virtualized computing service control plane

Disclosed are various embodiments for customer-managed authentication in radio-based networks. In one embodiment, a radio-based network is managed for an organization. The radio-based network includes a radio access network and an associated core network. A request is received from the organization to configure one or more parameters affecting primary keys in the associated core network. The primary keys correspond to pre-shared keys of client devices permitted to access the radio-based network. Storage of the primary keys is customized in the associated core network based at least in part on the one or more parameters in response to the request.

Customer-managed authentication for radio-based networks

A first extension resource group (ERG) of a provider network, comprising a radio-based application pipeline processing server with a network accelerator card, is configured at an external premise. A first set of network functions of a radio-based application is executed at the card. A second ERG is configured at the premise, and a second set of network functions of the radio-based application is executed at the second ERG.

Capacity management for radio-based applications

A portion of a radio-based application (RBA) is executed at a first runtime environment (RTE) launched at a server. The first RTE includes a software program for processing messages between a pair of layers of the RBA. In response to determining that the portion of the RBA is to be executed at a second RTE, at least a subset of state information pertaining to the inter-layer messages is transferred to the second RTE without pausing the RBA. After the state information is transferred, the portion of the RBA is run at the second RTE.

Transparent migration of radio-based applications

Disclosed are various embodiments for configurable security policies in radio-based networks. In one embodiment, a security event detection rule or a security event mitigation rule for a radio-based network is accessed. The radio-based network includes a radio access network and an associated core network. At least a portion of the radio-based network is operated by a cloud provider on behalf of an organization. A security event is detected based at least in part on the security event detection rule. At least one action is performed in response to the security event based at least in part on the security event mitigation rule.

Configurable security policies for radio-based networks

Disclosed are various embodiments for customer-defined capacity limit plans in communication networks. In one embodiment, a request for a service from a radio-based network is received from a first client device. A network function in the radio-based network is determined to be at a capacity limit. Service from the network function to a second client device to the network function is suspended in response to determining that the network function in the radio-based network is at the capacity limit and based at least in part on a rule set specific to the radio-based network. The first client device is provided access to the network function instead of the second client device.

Customer-defined capacity limit plans for communication networks

A first security rule set for traffic of a compute instance run at a virtualization server is stored in response to a programmatic request. A second security rule set for traffic of a network function accelerator of the virtualization server is stored in response to another programmatic request. Prior to delivery of network messages to the compute instance or from the accelerator, compliance with the applicable security rule set is verified.

Enabling isolated virtual network configuration options for network function accelerators

State information of a radio-based application, used to process messages of the application, is made accessible from a first compute instance and a second compute instance at a virtualization server. The first instance is assigned to process a first portion of a workload of the application, including a message which comprises a result of a network function executed at a network function accelerator of the server. In response to determining that a condition for migrating workload from the first compute instance has been met, an additional message of the first portion is directed to the second compute instance. The second compute instance processes the additional message using the state information.

Enhancing availability of radio-based applications using multiple compute instances and virtualized network function accelerators at cloud edge locations

Disclosed are various embodiments for integrating multiple access technologies in a radio-based network. In one embodiment, first data is received from a first wireless device connected to a radio-based network via a first access technology. Second data is received from a second wireless device connected to the radio-based network via a second access technology. The first access technology and the second access technology use a different physical layer and a different media access control layer but use a network layer that is in common. The first data and the second data are processed at the network layer in the radio-based network using a common processing element.

Integrating multiple access technologies in a radio-based network

Disclosed are various embodiments for certificate-based authentication in radio-based networks. In one embodiment, a request for service from a radio-based network is received from a client device. The request for service includes a secure certificate. The radio-based network includes a radio access network and an associated core network. The authenticity of the secure certificate is validated based at least in part on a certificate signature in the secure certificate signed by a certificate authority. It is determined that an entity identified in the secure certificate is permitted to access the radio-based network. Radio-based network access is provided to the client device in response to determining that the entity is permitted to access the radio-based network.

Certificate-based authentication for radio-based networks

A determination is made, at a first server of an extension resource group of a provider network, that a network function of a radio-based application is to be executed. A request for the network function is transmitted from a first server to a second server of the extension resource group. The network function is executed at a network function accelerator card of the second server. A result of the execution is sent to a radio unit of the radio-based application from the second server.

Growing community of inventors

San Francisco, CA, United States of America

Benjamin Wojtowicz