Amazon Technologies, Inc.

Bijendra Singh

Kari Ann O'Brien

Thomas A Volpe

Kiran Kalkunte Seshadri

Sravya Kusam

Anand Narayan Acharya

Kenneth Wayne Patton

Himabindu Sajja

Kari Ann OBrien

Thomas Bradley Scholl

Sundeep Amirineni

Mark Banse

Chase Johnson

Joshua Eugene Stevens

Dawit Teshome Habtegiorgis

Richard Dyson

Christopher Warren Jones

Denys Tseng

Satya Ranganathan

Praveen Kumar Madhanagopal

Saadiah Gul Ahmed

Lambertus Antonius Jacobus Cornelis Schouwenaars-Harms

Paul White

Apurva Patel

In one embodiment of the disclosure, packets are routed according to a VRF (Virtual Routing and Forwarding) domain that is represented by a VRF identifier in a VRF-identifier (ID) field of packet headers. In one embodiment of the disclosure, a VRF identifier may be added to a VRF-ID field of a packet header so that the packet is routed according to a VRF domain that the packet belongs to.

Extending virtual routing and forwarding

A workflow orchestration system obtains a plurality of documents for execution of a workflow on a plurality of different sub-systems. A document from the plurality of documents indicates an action to be executed by a corresponding sub-system and comprises an authorization for execution of the action by the corresponding sub-system. The authorization specified in the document can be verified by the corresponding sub-system. Based on the obtained plurality of documents, the workflow orchestration system determines whether these documents provide sufficient authorizations for execution of the workflow. If so, the workflow orchestration system executes the workflow by transmitting the documents to the corresponding sub-systems for execution of the actions specified therein.

Authorization orchestration for distributed systems

This disclosure proposes systems and methods to perform audio based projector control by a projector device to detect that a user is close to a projector and disable the projector when certain conditions are detected. The projector device may detect the user by performing voice activity detection (VAD) and/or breathing activity detection (BAD) on reference audio data generated by a reference microphone by the projector. In some examples, the projector device may determine that the user is located near the projector by performing beamforming on input audio data and/or comparing a first signal strength of the reference audio data to a second signal strength of the input audio data. The projector device may also implement two level device peripheral control architecture to provide additional safeguards to ensure that control mechanisms are in place even if a central processing unit (CPU) stops operating normally.

Audio based projector control

Disclosed are devices, systems, and methods for the use of memory including a data table configured to store a plurality of elements, wherein the plurality of elements are arranged into a plurality of buckets and each of the plurality of buckets comprising a plurality of entries. A first power domain can be associated with an entry of each bucket or with a first bucket. A second power domain can be associated with a second entry of each bucket or a second bucket. Processing logic can be configured to search for a particular value stored in an element of the plurality of elements by selecting buckets of the plurality of buckets and selecting at least one entry of each of the buckets. A programmable register can be used to select a powered state of the second power domain based on a configuration of the programmable register.

Power reduction methods for variable sized tables

A plurality of attributes associated with a user of an account making a request is determined based on the received request. One or more operations to grant the user access to the one or more resources of the second account are determined based on the attributes. Access is provided to one or more resources of the second account according to the one or more operations to fulfill the request.

Multi-account entity based access control

A packet processor or packet processing pipeline may implement programmatic selection of load balancing output for forwarding paths. Programmatic selection for load balancing among forwarding paths may be enabled or disabled at one or more stages. If programmatic selection is enabled when network packets are received, a programmatically identified path may be provided as the selected path of a load balancing scheme at a stage. Forwarding of the packet may then be performed according to the selected path.

Programmatic selection of load balancing output amongst forwarding paths

Power management of a routing table, which comprises a plurality of hash tables, is provided by supporting various power domain configurations. Each power domain configuration can be associated with a different number of power domains than other power domain configurations. Each power domain can add vertical capacity to the entire routing table by adding a fixed number of buckets to each of the hash tables. Efficient power management can be achieved by switching between a lower power domain configuration and a higher power domain configuration during runtime based on the dynamic load conditions.

Power management of routing tables using vertical scaling

Disclosed are techniques regarding interfaces, each configured to output network packets. The techniques can regard a memory for storing multipath groups, virtual output queues, and a histogram table for storing statistical information associated with network packets to be output by interfaces. The techniques can include generating a shared-interface list including a member that represents a union of interfaces of at least some of the multipath groups, wherein the multipath groups of the member share at least one of the interfaces. The techniques can include associating the histogram table with the member. The techniques can include collecting the statistical information pertaining to network packets indicated by information stored in one of the virtual output queues, populating the histogram table with the statistical information, and determining that one of the interfaces is congested based on the statistical information.

Congestion avoidance in multipath routed flows using virtual output queue statistics

Disclosed are techniques regarding interfaces, each configured to output network packets. The techniques can include a memory storing a first multipath group associated with the interfaces and a routing table containing routes to the first multipath group. The techniques can further include congestion detection logic configured to determine that an interface of the first multipath group is congested from a flow of network packets, the flow of network packets directed to the first multipath group from a route of the routing table. The techniques can additionally include congestion avoidance logic configured to, upon determining that the interface of the first multipath group is congested, dissociate the route from the first multipath group and associate the route with a second multipath group, the second multipath group associated with the interfaces of the first multipath group.

Load balancing for multipath groups routed flows by re-associating routes to multipath groups

Packet processors or other devices with packet processing pipelines may implement pipelined evaluations of algorithmic forwarding route lookups. As network packets are received, a destination address for the network packets may be divided into different possible prefix lengths and corresponding entries in a routing table for the different possible prefix lengths may be determined according to a hash scheme for the routing table. The entry values may be read from the routing table and evaluated at subsequent stages to identify the entry with a longest prefix match with respect to the destination address for the network packet. The routing table may include entries for different types of network packets and may be configured to include virtual routing and forwarding for network packets.

Pipelined evaluations for algorithmic forwarding route lookup

Techniques are disclosed regarding receiving a plurality of flows of network packets and determining, by processing logic of a device, a hash value for each of the network packets of the flows, wherein the hash value indicates the flow of network packets that a network packet belongs to. Based on the hash value, one of a plurality of interface ports of a multipath group of the device can be selected for output of network packets from two of the flows of network packets. Network packets from the two flows of network packets to be output by the interface port can be stored. Upon determining that a number of packets stored from the one of the two flows of network packets meets a first threshold, one of the two flows of network packets can be identified as a congestion contributing flow.

Congestion avoidance in multipath routed flows

Techniques are disclosed regarding interfaces, each configured to output network packets. The techniques can include a memory storing a first multipath group associated with the interfaces and a routing table, containing a first route to the first multipath group. The techniques can also include congestion detection logic configured to determine that an interface of the first multipath group is congested. The techniques can additionally include congestion avoidance logic configured to, upon determining that the interface of the first multipath group is congested, generate a second route in the routing table to a second multipath group associated with the interfaces of the first multipath group, wherein the second route diverts a flow of network packets from the first multipath group to the second multipath group.

Load balancing for multipath group routed flows by re-routing the congested route

Entropy in routing tables may be increase to perform packet forwarding. Hash tables that store forwarding routes may be divided into multiple hash table segments. Forwarding routes may be stored across the hash table segments in different route segments. When looking up route segments to identify a forwarding route for a destination address of a network packet, digest values generated for previous route segments may be used to determine hash key values to identify hash table entries in a different hash table segment. The forwarding route may be identified according to the hash table entries located based on the digest values for previous route segments.

Increasing entropy across routing table segments

Systems, methods, apparatus and computer readable medium is disclosed for extending the Virtual Routing and Forwarding (VRF) in the network using embedded source identifiers in the packets. An example apparatus may include ports, memory and processing logic. The memory may include VRF routing tables corresponding to respective VRF domains and a list of media access control (MAC) addresses, wherein each MAC address in the list is linked to one of the respective VRF routing tables. The processing logic may be configured to receive an ingress packet at a port, identify a matching MAC address in the list that matches a source identifier of the ingress packet, and process the ingress packet according to the respective VRF domain associated with the matching MAC address that matches the source identifier.

Growing community of inventors

Cedar Park, TX, United States of America

Bijendra Singh