Amazon Technologies, Inc.

Google Inc.

Matthew Shawn Wilson

Anthony Nicholas Liguori

Eric Jason Brandwine

Nafea Bshara

Ian Paul Nowland

Brian William Barrett

David R Richardson

Adi Habusha

Nachiketh Rao Potlapally

Matthew John Campagna

Mark Bradley Davis

Gregory Alan Rubin

Jason Alexander Harland

Diwakar Gupta

Darin Lee Frink

Alan Michael Judge

Jaspal Kohli

Yaniv Shapira

Rahul Gautam Patel

Uwe Dannowski

Raviprasad Venkatesha Murthy Mummidi

Saar Gross

Ziv Harel

Andra-Irina Paraschiv

Aaron Spangler

Erez Izenberg

Andrew Bruce Dickinson

Cristian Marius Ilac

Guy Nakibly

Robert Michael Johnson

William John Earl

Shuvabrata Ganguly

Barak Wasserstrom

Khaja Ehteshamuddin Ahmed

Kypros Constantinides

Clint Joseph Sbisa

Hani Ayoub

Ronen Shitrit

Itay Poleg

Stefano Stefani

Jagwinder Singh Brar

Wei Xiao

Sudipta Sengupta

Peter Nicholas Desantis

Thomas Charles Stickle

Nathan Bartholomew Thomas

Martin Thomas Pohlack

Christopher Richard Jacques De Kadt

John Merrill Phillips

Justin Oliver Pietsch

Aaron Craig Thompson

Divya Ashok Kumar Jain

Poorna Chand Srinivas Perumalla

Frederick David Sinn

Julien Jacques Ellie

Christopher James BeSerra

Sriram Venugopal

Fan Ping

Derek Del Miller

Michael Groenewald

Pejus Manoj Das

Erez Tsidon

Haifeng He

Afshin Majd

Yotam Admon

Peter Klewinghaus

Jacobus Johannes Van Der Merwe

Jiacheng Guo

Ashu Razdan

Anoop G Mavath

Anish Borkar

John Michael Hayden

Shirley Xue Yi Leung

Vladimir Mitrovic

Yongcong Luo

Max Joseph Spevack

Nathan H Blackham

Systems and methods are provided for hosting block storage volumes in a hosted computing environment that are supported by multiple underlying elements and that are distributed among physical host devices in a manner that provides for resiliency of the volumes in instances of power failure. As disclosed herein, a block storage volume may be supported by a combination of underlying elements, such as replicas that store data of the volume and replicated authority nodes that designate authority of a replica to accept writes to the volume. To ensure resiliency to power failure, both replicas and authority nodes can be distributed among physical host devices that are supplied by independent power supplies, such that failure of one independent power supply does not render the volume non-operational.

Power-diverse placement for data replicas and authority nodes in network-based storage

A request to launch a compute instance is received at a control plane of a provider network. At an outbound command communicator, an indication that a compute instance is to be established at a target host at a client premise is obtained. A first address is associated with the target host at the control plane and also assigned to the communicator. A message with a second address within a first network of the client premise as a destination is transmitted. The message comprises a command to establish the compute instance at the target host. The first address is assigned to the target host within a second network of the client premise. Processing of the command at the target host results in establishment of a compute instance.

Provider network service extensions

At a first compute instance run on a virtualization host, a local instance scaling manager is launched. The scaling manager determines, based on metrics collected at the host, that a triggering condition for redistributing one or more types of resources of the first compute instance has been met. The scaling manager causes virtualization management components to allocate a subset of the first compute instance's resources to a second compute instance at the host.

Automated local scaling of compute instances

A peripheral device may implement storage virtualization for non-volatile storage devices connected to the peripheral device. A host system connected to the peripheral device may host one or multiple virtual machines. The peripheral device may implement different virtual interfaces for the virtual machines or the host system that present a storage partition at a non-volatile storage device to the virtual machine or host system for storage. Access requests from the virtual machines or host system are directed to the respective virtual interface at the peripheral device. The peripheral device may perform data encryption or decryption, or may perform throttling of access requests. The peripheral device may generate and send physical access requests to perform the access requests received via the virtual interfaces to the non-volatile storage devices. Completion of the access requests may be indicated to the virtual machines via the virtual interfaces.

Virtualizing non-volatile storage at a peripheral device

Methods and apparatus are disclosed for programming reconfigurable logic devices such as FPGAs in a networked server environment. In one example, a system hosting a network service providing field programmable gate array (FPGA) services includes a network service provider configured to receive a request to implement application logic in a plurality of FPGAs, allocate a computing instance comprising the FPGAs in responses to receiving the request, produce configuration information for programming the FPGAs, and send the configuration information to an allocated computing instance. The system further includes a computing host that is allocated by the network service provider as a computing instance which includes memory, processors configured to execute computer-executable instructions stored in the memory, and the programmed FPGAs.

Networked programmable logic service provider

Techniques are described for enabling a service provider to determine the power utilization of electrical lineups powering physical servers in a data center and place virtual machine instances into the physical servers based on the power utilization and a user-specified preference of a virtual machine instance type. In one embodiment, a computer-implemented method includes determining a power utilization for each lineup of a plurality of lineups that comprise a plurality of racks of physical servers, selecting a lineup of the plurality of lineups for the virtual machine instance based on the power utilizations for the plurality of lineups, selecting a virtual machine slot for the virtual machine instance from a plurality of candidate virtual machine slots of the physical servers of the lineup based on the user-specified preference, and causing the virtual machine slot of a physical server of the lineup to execute the virtual machine instance.

Power aware load placement

At a virtualization host, an isolated run-time environment is established within a compute instance. The configuration of the isolated run-time environment is analyzed by a security manager of the hypervisor of the host. After the analysis, computations are performed at the isolated run-time environment.

Verified isolated run-time environments for enhanced security computations within compute instances

This disclosure describes systems, devices, and methods for performing and facilitating tenant migration between multiple bare-metal servers. An example method includes receiving an indication of an impending reboot of a first bare-metal server. The first bare-metal server may be hosting a tenant. The method further includes identifying a second bare-metal server in a pre-initialized state. The method also includes causing the first bare-metal server to migrate data associated with the tenant to the second bare-metal server in advance of the reboot.

Reboot migration between bare-metal servers

At a network manager of an extension resource group of a provider network, a message comprising a command to launch a compute instance is received at an address which is part of a first network configured at a premise external to the provider network. The extension resource group includes a first host at the external premise. Within a second network configured at the external premise, the first host is assigned an address within a second address range. Addresses within the second range are also assigned to hosts within the provider network. The command is transmitted to the first host, and a compute instance is instantiated.

Extension resource groups of provider network services

At a virtualization host which includes an instance partitioning controller, a set of resources is allocated to a compute instance by a virtualization manager. The first compute instance does not include another virtualization manager. In response to a communication from the controller, the virtualization manager allocates a subset of the resources to a child compute instance launched at the virtualization host. An application is executed within the child compute instance.

Customized partitioning of compute instances

Suspend, restart and resume to update storage virtualization at a peripheral device

A formalized set of interfaces (e.g., application programming interfaces (APIs)) is described, that uses a security scheme, such as asymmetric (or symmetric) cryptography, in order authorize and authenticate requests sent to a virtualization later. The interfaces can be invoked to perform security monitoring, forensic capture, and/or patch software systems at runtime. In addition to the foregoing, other aspects are described in the claims, detailed description, and figures.

Secure interface for invoking privileged operations

Generally described, aspects of the present disclosure relate to a live update process of the virtual machine monitor during the operation of the virtual machine instances. An update to a virtual machine monitor can be a difficult process to execute because of the operation of the virtual machine instances. Generally, in order to update the virtual machine monitor, the physical computing device needs to be rebooted, which interrupts operation of the virtual machine instances. The live update process provides for a method of updating the virtual machine monitor without rebooting the physical computing device.

Live updates for virtual machine monitor

Growing community of inventors

Seattle, WA, United States of America

Matthew Shawn Wilson