Amazon Technologies, Inc.

Bobby Brown

Thomas Bradley Scholl

Tahir Azim

Harvo Reyzell Jones

Stefan Christian Richter

John E Shields

Julien Ridoux

Seyed Arash Sadrieh

Michael W Palladino

Ali Khayam

Kushal Mall

Kelly Anne Rooker

Bradford Sachin Chatterjee

Fiachra John Groarke

Lincoln Travis Dale

Eric Charles Briffa

Darshan Narayana Reddy

Grace Marie Hatamyar

Karthik Chandrashekar

Joan Barcelo Llado

Kenan Yang

Rajat Chaudhary

Nikhil Ashok Arjunagi

Robert Louis Mosher

Lewis Iain McLean

Andrey Sokolov

Benjamin Villain

Sidath Manawadu

Apoorv Srivastava

Andrew Robert Hassall

A system is disclosed for programming target devices with a filtered (reduced) set of route updates. The system can be divided into a backend system and a frontend system. The backend system analyzes all routes being used and generates a prefix list used for filtering. The frontend system can filter the route updates to target routers and switches to ensure that the number of prefixes installed in a forwarding table of the target routers or switches does not exceed a configured amount. Different frontend systems can coordinate to prevent deviations in the forwarding tables. More specifically, different frontend systems can synchronize with each other to ensure that a union of hot prefixes they propagate always remains under a configured prefix count. The backend system can be responsible for computing and maintaining a sorted list of prefixes, which can be at a per-site or per-service granularity.

Network devices programmed with most-used routes

Technologies are disclosed for performing context-aware routing of traffic based on an application of a series of filters and/or selectors to determine an optimal group of interfaces for servicing traffic relating to a prefix. A traffic management control plane processes input data corresponding to aggregated telemetry data for a network by determining candidate groups of interfaces to service a network prefix and applies tunable filters and/or selectors to the candidate groups to determine a targeted group to use for servicing traffic corresponding to the prefix. The determined targeted group is mapped to the prefix in a mapping result, which is then provided to an actuator interface to control network devices to inject the new mapping into the network to control traffic according to the mapping.

Network traffic management

The present disclosure generally relates to systems and methods for utilization of network mitigation techniques in the form of null address routing to mitigate coordinated DDOS attacks. A monitoring and mitigation service can characterize a command and control node as compromised or otherwise manipulated for purposes of generating distributed attacks. The monitoring and mitigation service can then identify network mitigation information in the form of null routing addresses that will cause network communications associated with the identified command and control node to be terminated or otherwise not delivered to the intended network-based resources. The monitoring and mitigation service can propagate the null routing address to routing components. The network mitigation information can be associated with expiration criteria for the routing components that receive and implement the network mitigation technique.

Managing network mitigation techniques

Growing community of inventors

Sydney, Australia

Bobby Brown