Oracle International Corporation

Amazon Technologies, Inc.

Microsoft Technology Licensing, LLC

Peter John Hill

Adrian Lindsay Power

David Allen McArthur

Eric Jason Brandwine

Jagwinder Singh Brar

Sushant Ajit Mantri

Daniel Todd Cohn

Andrew Bruce Dickinson

Michael Phillip Czamara

Thomas Bradley Scholl

John William Eichelberg

Chris Higgins

Vivek Bhanu

Matthew Dean Rehder

Paul A Stancik

Travis Steven Pepper

Yogesh Sreenivasan

Dale Raymond Worley

Eduardo Manuel Parra

Richard M Lotz

Samuel Joseph Mortimer

Michael Thomas Banatt

Joseph James Lindsay

Amitkumar Chudasma

Faraz Yusuf

Mikhail Ivan Cherniak

Daniel J Rohrabaugh

Zhao Yuan Wang

Jacques Joshua Richard

Lukasz Sulek

Michal Aleksander Karczmarek

Tal Altman

Pingbo Zhang

Jincheng Liu

Eugen Enache

Jorgen Lawrence Johnson

Albert A Arcuino

Sushant Mantri

Techniques for performing distributed rate limiting in networks in a cloud environment are described for determining an amount of network bandwidth available to be processed by flow control nodes within a cloud network for a first time period, determining a bandwidth allocation for traffic classes for the first time period, determining, a portion of the bandwidth allocation for the flow control nodes, providing, data to the flow control nodes, where the data indicates the portion of the bandwidth allocation for the traffic classes, and receiving, second data that indicates an amount of network traffic routed during the first time period by individual ones of the flow control nodes.

Distributed rate limiting

A configuration helper system (CHS) is described that simplifies the task of generating configuration information for a customer premises equipment (CPE) in a customer's on-premise network to enable the CPE to communicate with the customer's cloud network over a particular communication channel. The CHS is configured to generate configuration information that is customized for the particular CPE and communication channel. Given information about the CPE and the communication channel, the CHS automatically identifies a particular set of configuration parameters to be included in the customized configuration information and determines values for the set of parameters, where some of the values may be provided by the customer. A particular CPE-specific format is determined for the configuration information. Customized configuration information for the CPE is then generated in the determined format, where the generated configuration information includes the set of parameters and their values, and potentially other CPE-specific information.

Techniques for dynamic configuration generation

A network validation system is described which may perform operations such as generating, analyzing, verifying, correcting, recommending, and deploying language, symbols, etc., such as domain specific language, configured to allow users to express their intent on the configuration and operation of a network, such as a cloud-based network. The network validation system may provide domain specific language that includes rules, statements, symbols, data, etc., configured to convey the intent of users on the configuration and operation of networks for purposes such as configuring and/or validating communication paths, testing or setting associated network object configurations, and may be employed to report violations in such configurations relative to user intent of the one or more users. The network validation system may also be employed to monitor such domain specific language and generate telemetry signaling, for example, that a rule has or has not been violated, actions a user may take, etc.

Network operation based on domain specific language

The detection of network communication problems in networks that have multiple end nodes, and multiple transit nodes in between. One or more of the end nodes monitors one or more flows, creates associated flow information including performance information for each flow, and then reports the flow information. A system then estimates, for each of multiple flows within the network, a likely path that network traffic takes through that network. The system might then use performance information for each of the reported flows to identify at least one candidate problem network entity that is common amongst the estimated paths of the at least the subset of the plurality of flows.

Identification of candidate problem network entities

Intent-based network validation

Techniques for exposing a subset of hosts on an overlay network, without exposing another subset of hosts on the overlay network, are disclosed. A component associated with an overlay network exposes a subset of hosts on the overlay network to components external to the overlay network. The component exposes the subset of hosts by distributing a mapping between (a) the hosts to-be-exposed and (b) the substrate addresses associated with the hosts. Alternatively, a component external to an overlay network exposes a subset of hosts on the overlay network to additional components external to the overlay network. The component exposes the subset of hosts by distributing a mapping between (a) the hosts to-be-exposed and (b) a substrate address associated with the particular component. In either embodiment, a mapping for hosts to-be-hidden is not distributed.

Exposing a subset of hosts on an overlay network to components external to the overlay network without exposing another subset of hosts on the overlay network

Techniques are described for providing virtual networking functionality for managed computer networks. In some situations, a user may configure or otherwise specify one or more virtual local area networks ('VLANs') for a managed computer network being provided for the user, such as with each VLAN including multiple computing nodes of the managed computer network. Networking functionality corresponding to the specified VLAN(s) may then be provided in various manners, such as if the managed computer network itself is a distinct virtual computer network overlaid on one or more other computer networks, and communications between computing nodes of the managed virtual computer network are handled in accordance with the specified VLAN(s) of the managed virtual computer network by emulating functionality that would be provided by networking devices of the managed virtual computer network if they were physically present and configured to support the specified VLAN(s).

Providing virtual networking functionality for managed computer networks

Operations include determining billing for data being transmitted out of an Autonomous System (AS). An internal node in the AS determines billing for a packet transmitted out of the AS based at least on an egress path of the packet. The packet is received at the internal node in the AS The internal node selects an egress path of the packet based on one or more characteristics of the packet. The egress path is mapped directly or indirectly to a billing counter. The billing counter is incremented based on (a) the transmission of the packet on the overlay network to the egress gateway and (b) transmission of the packet out of the AS on the selected egress path.

Overlay network billing

Techniques for transmitting test traffic on a communication link are disclosed. A computer system includes at least two nodes, interconnected by a particular communication link. A test engine associated with one of the two nodes identifies a level of data traffic being transmitted on the particular communication link. Based on the level of data traffic, the test engine selects a level of test traffic to be transmitted on the particular communication link. The node associated with the test engine transmits the selected level of test traffic on the particular communication link. The test traffic is transmitted concurrently with the data traffic on the particular communication link. The node receiving the test feedback transmits test feedback. Based on the test feedback, the test engine generates test results for the particular communication link. The test engine determines and/or executes a corrective action based on the test results.

Transmitting test traffic on a communication link

Systems, methods, and other embodiments associated with network peering discovery are described. In one embodiment, a method includes receiving, and storing in a data structure, a customer location where a customer terminal is located, and platform information identifying a multi-tenant platform. A network exchange point is identified, and includes network hardware where a physical network connection to the multi-tenant platform is to be established for the customer terminal. If a distance separating the network exchange point from the customer location does not exceed a threshold, the data structure is modified to include a local network connection between the network exchange point and the customer terminal. If the distance exceeds the threshold, the data structure is modified to include a third-party network between the customer terminal and the network exchange point. The modified data structure is transmitted to a remote computer terminal to control creation of a peer connection.

Network peering discovery system and method

Operations include executing operations across different third-party computing clouds provided by different vendors. A cloud discovery process allows for a virtual machine, executing on a computing cloud, to discover resources on a different computing cloud provided by a different vendor. The cloud discovery process is implemented by one or more cloud agents executing within third-party clouds. A cloud agent, corresponding to a third-party computing cloud, may use a cross-cloud repository that is maintained by a tenant to discover resources in other third-party computing clouds provided by different vendors. An Application Programming Interface (API) for accessing a particular third-party computing cloud may be exposed to a cloud agent of another third-party computing cloud provided by a different vendor. The cloud agent may trigger operations on the particular third-party computing cloud based on events detected by the cloud agent in the third-party computing cloud corresponding to the cloud agent.

Cross-cloud operation management

Operations include determining billing for data being transmitted out of an Autonomous System (AS). An internal node in the AS determines billing for a packet transmitted out of the AS based at least on an egress path of the packet. The packet is received at the internal node in the AS via a particular overlay network of a plurality of overlay networks. Each overlay network may be associated with a corresponding tenant of a set of tenants. The internal node selects an egress path of the packet based on one or more characteristics of the packet. The egress path and the overlay network are mapped directly or indirectly to a billing counter. The billing counter is incremented based on (a) the transmission of the packet on the overlay network to the egress gateway and (b) transmission of the packet out of the AS on the selected egress path.

Techniques for executing multiple Virtual Private Network (VPN) endpoints associated with an Endpoint Pool Address are disclosed. A VPN endpoint manager determines traffic attributes of traffic addressed to the Endpoint Pool Address. The VPN endpoint manager selects a quantity of VPN endpoints to be executed for processing the traffic based on the traffic attributes. The VPN endpoint manager causes execution of a plurality of VPN endpoints corresponding to the selected quantity. The VPN endpoint manager selects one VPN endpoint, from the VPN endpoint pool, to process each data packet addressed to the Endpoint Pool Address. The VPN endpoint manager may select different VPN endpoints to process data packets of different VPN sessions. The VPN endpoint manager may transfer a VPN session from one VPN endpoint to another VPN endpoint. The VPN endpoints in the VPN endpoint pool operate concurrently to process data packets addressed to the Endpoint Pool Address.

Executing multiple virtual private network (VPN) endpoints associated with an endpoint pool address

Growing community of inventors

Seattle, WA, United States of America

Peter John Hill