Amazon Technologies, Inc.

David James Goodell

Richard Hazen Galliher, Iii

Anthony Nicholas Liguori

Joseph Elmar Magerramov

Eric Samuel Stone

Yang Lin

Shovan Kumar Das

William Ashley

Steven Anthony Kady

Patrick John Lawrence

Benjamin Charles Serebrin

Anoop Dawani

Ethan Joseph Torretta

Matthew B Barr

Andrew Davenport

James Gabriel Watson

Bharadwaj Avva

Steven Bruce Richards

Nandita Mathews

Yujing Xie

Ariana Meika Morgan

Rajeevardhan Gopalan

In response to receiving a reservation request at a provider network, metadata indicating that a group of network addresses of a subnet is reserved for operations of a particular category is stored. A first request for an operation, requiring assignment of an address of the reserved group is rejected if the operation does not belong to the particular category, even if the address is not in use. In response to a second request for an operation which does belong to the particular category, an address of the reserved group is assigned.

Proactive reservations of network address blocks for client-specified operation categories at isolated virtual networks

A first set of network addresses of a first address family, and a second set of network addresses of a second address family, are assigned to a virtual machine. At a routing device, respective routing information entries for the two sets of network addresses are stored, without storing routing information entries for individual addresses of the sets. A first packet with a destination address within the first set, routed using the routing information entry for the first set, is obtained at the virtual machine. A second packet with a destination address within the second set, routed using the routing information entry for the second set, is obtained at the virtual machine.

Efficient propagation of routing information for compute instances with network address ranges of multiple address families

A first service of a provider network obtains an identification of one or more substrate addressable devices included in an extension of the provider network. Based on the identification, a launch of one or more compute instances within the provider network is initiated. The one or more compute instances are to connect the provider network to the extension of the provider network across at least a third-party network by receiving a first control plane message directed to a first substrate addressable device of the one or more substrate addressable devices, by updating a message state data store based at least in part on the first control plane message, and by sending a second control plane message to the first substrate addressable device via a secure tunnel.

Provider network connectivity management for provider network substrate extensions

Features are disclosed for enriching a packet of network traffic between a first computing environment and a second computing environment with telemetry information. Each computing environment can include a network device for enriching packets with telemetry information and parsing enriched packets. A source network device can select a packet of the network traffic for enrichment based on enrichment parameters and generate an enriched packet including payload information and telemetry information. A destination network device can receive the enriched packet and parse the enriched packet to separate the payload information and telemetry information. The destination network device can transmit transmission information to the source network device based on the enriched packet.

Active network monitoring with telemetry-enriched packets

Techniques for networking in provider network substrate extensions are described. A compute instance of an isolated virtual network is hosted by an extension of a provider network that is in communication with the provider network via a secure tunnel through a customer network. A request to establish communications between the isolated virtual network and the customer network is received at an interface to the provider network. A message to cause a gateway of the extension to route traffic between the isolated virtual network and the customer network is sent via the secure tunnel.

Networking in provider network substrate extensions

A first message of a first type and having a first destination address is received in a provider network. The first destination address is associated with a virtual network address of the provider network and an address of a first device in an extension of the provider network, the extension of the provider network in communication with the provider network via at least a third-party network. A message state data store is updated based on at least a portion of the first message. A first payload of the first message is sent to the first device a first secure tunnel through the third-party network.

Provider network connectivity to provider network substrate extensions

Techniques for safe oversubscription of connection tracking entries are described. A method for safe oversubscription of connection tracking entries may include receiving a request for an allocation of a resource on a physical host in a provider network, the request received by a resource allocation monitor from an instance hosted by the physical host, determining a resource availability on the physical host, the resource availability based on a total amount of the resource on the physical host, a reserved amount of the resource to a plurality of instances hosted by the physical host, and a shared amount of the resource, and granting or denying the resource allocation based at least on the determined resource availability.

Safe oversubscription of connection tracking entries

Back massager

Pyramid greenhouse

Growing community of inventors

Seattle, WA, United States of America

David James Goodell