Amazon Technologies, Inc.

Upendra Bhalchandra Shevade

Diwakar Gupta

Ishwardutt Parulkar

Ximeng Simon Yang

Benjamin Wojtowicz

Gregory Rustin Rogers

Georgios Elissaios

Kaixiang Hu

Shane Ashley Hall

Dougal Stuart Ballantyne

Tipu Saleem Qureshi

Michael Brooke Furr

Daniel Massaguer

Kiran Kumar Edara

Nishant Kanaiyalal Mehta

Devlin Roarke Dunsmore

Kevin P Smith

Igor A Kostic

Ethan Joseph Torretta

Kyle Benjamin Schultheiss

Allan Henry Vermeulen

Colm MacCarthaigh

Omer Ahmed Zaki

Nikolay Krasilnikov

Christopher Ian Hendrie

Shridhar Kulkarni

James Michael Lamanna

Theodore Joseph Maka'iwi DeRego

Leslie Andrew Prock

Sahil Mansukhlal Koladiya

Manish Gilani

Edward Max Schaefer

Kevin Christopher Miller

Anthony Nicholas Liguori

Bashuman Deb

Shuai Ye

Kirk Arlo Petersen

Christopher Brian Barclay

Matthew B Barr

Mathew Lehwess

Young Ha Jung

Akshay Choudhry

Christopher Barclay

Scott Renda

Nishant Mehta

In response to a programmatic request, configuration information representing a multi-network-segment gateway established on behalf of a customer is stored at a networking service. In response to another programmatic request, a communication session is established between a route signaling node of the gateway and a routing information source located at a customer premise. In response to additional programmatic input, the networking service stores an indication that the gateway is to be used to transfer packets between a cloud-side virtual network and a customer-side virtual network. The routing information exchanged in the session pertains to the cloud-side and customer-side virtual network, and is used to transfer data packets between the two virtual networks.

Custom configuration of cloud-based multi-network-segment gateways

At a radio-based application pipeline processing server at which a portion of a distributed unit (DU) of a radio-based application is implemented, a particular networking hardware device is selected from among several devices (which include least one device incorporated within a network function accelerator card and at least one device which is not part of an accelerator card) for transmission of at least a portion of mid-haul traffic to a centralized unit (CU). The mid-haul traffic is transmitted to the CU via the selected device. At least a portion of front-haul traffic is transmitted to a radio unit (RU) via a networking hardware device incorporated within a network function accelerator card of the server.

Network traffic management at radio-based application pipeline processing servers

Respective network addresses are assigned to a networking hardware device and a network function accelerator incorporated within an offloading card of a virtualization server by a control plane server of a virtualized computing service. A compute instance is launched at the virtualization server using a virtualization controller of the offloading card. The compute instance executes a network function of a radio-based application in response to a request received using the network address assigned to the hardware device, and requests execution of a second network function at the accelerator. The result of the second network function is sent to a radio unit of the application using the address assigned to the accelerator.

Managing network function accelerators for radio-based applications from virtualized computing service control plane

A control plane server of a virtualized computing service determines that connectivity is to be established between a first portion and a second portion of a distributed application. The first portion runs at a first edge location of a provider network, and the second portion runs at a second edge location. The control plane server transmits metadata associated with the second edge location to a connectivity manager at the first edge location. The metadata is used to establish a secure network channel between the connectivity manager and the second edge location. A message from the first portion of the distributed application is sent to the second portion via the channel.

Managed connectivity between cloud service edge locations used for latency-sensitive distributed applications

Techniques for utilizing dual-stack network addressing for compute instances hosted in an edge location of a cloud provider network along with communications service provider (CSP) network addresses are described. A first network address is assigned to the compute instance from a pool of network addresses of the cloud provider network, and a second network address is associated with the compute instance that is provided by the CSP network. A gateway of the edge location is updated to direct packets addressed to the second network address to the compute instance via use of the first network address.

Dual-stack network addressing in cloud provider network edge locations

Disclosed are various embodiments for customer-managed authentication in radio-based networks. In one embodiment, a radio-based network is managed for an organization. The radio-based network includes a radio access network and an associated core network. A request is received from the organization to configure one or more parameters affecting primary keys in the associated core network. The primary keys correspond to pre-shared keys of client devices permitted to access the radio-based network. Storage of the primary keys is customized in the associated core network based at least in part on the one or more parameters in response to the request.

Customer-managed authentication for radio-based networks

Connectivity between a radio-based application pipeline processing server and a control plane of a provider network is verified. Based on requests received at the control plane, a first isolated request handler, a second isolated request handler and an offloading manager are launched at the server. The offloading manager causes a first network function for which a request is received from the first request handler to be executed at a first network function accelerator of the server, and a second network function for which a request is received from the second request handler to be executed at a second network function accelerator of the server.

Multi-tenant radio-based application pipeline processing system

A first extension resource group (ERG) of a provider network, comprising a radio-based application pipeline processing server with a network accelerator card, is configured at an external premise. A first set of network functions of a radio-based application is executed at the card. A second ERG is configured at the premise, and a second set of network functions of the radio-based application is executed at the second ERG.

Capacity management for radio-based applications

Disclosed are various embodiments for interfaces for creating radio-based private networks. In one embodiment, a request is received via an interface to create a radio-based private network for a customer. The request indicates a quantity of wireless devices that will connect to the radio-based private network. A quantity of radio units to serve the radio-based private network is determined based at least in part on the quantity of wireless devices. The radio units are preconfigured to implement a radio access network for the radio-based private network. A shipment is initiated to the customer of the radio units that have been preconfigured. Resources in a cloud provider network are provisioned to function as a core network for the radio-based private network.

Interfaces for creating radio-based private networks

Disclosed are various embodiments for scheduling use of heterogeneous frequency schemes for radio-based networks. In one embodiment, a first frequency scheme is selected instead of a second frequency scheme based at least in part on the first frequency scheme being capable of meeting a quality-of-service requirement associated with a wireless device or an application executed in the wireless device. A radio-based network is configured to provide service to the wireless device in a geographic area using the first frequency scheme instead of the second frequency scheme.

Scheduling use of heterogeneous frequency schemes for radio-based networks

A portion of a radio-based application (RBA) is executed at a first runtime environment (RTE) launched at a server. The first RTE includes a software program for processing messages between a pair of layers of the RBA. In response to determining that the portion of the RBA is to be executed at a second RTE, at least a subset of state information pertaining to the inter-layer messages is transferred to the second RTE without pausing the RBA. After the state information is transferred, the portion of the RBA is run at the second RTE.

Transparent migration of radio-based applications

Disclosed are various embodiments for extending cloud-based virtual private networks to radio-based networks. In one embodiment, a subnet of a virtual private cloud network of a cloud provider network is created in a radio-based network. An identifier of a subscriber identity module of a client device is registered in the virtual private cloud network. The subscriber identity module is assigned to a security group of the virtual private cloud network. A request from the client device to connect to the radio-based network is received, and the request presents the identifier. The virtual private cloud network to which the client device is permitted access is determined. The client device is provided with access to a resource on the virtual private cloud network through the radio-based network.

Extending cloud-based virtual private networks to radio-based networks

Route tables may be associated with ingress traffic for logically isolated networks. A routing device at the edge of a logically isolated network may receive a route to include in a route table that is associated with ingress traffic to the logically isolated network, where the ingress traffic is destined for a block of public or private IP addresses. The route instructs the edge routing device to forward such ingress traffic to a network interface of a network appliance hosted in the logically isolated network. Network packets received at the edge routing device may have a destination of one or more public or private IP addresses in the block of public/private IP addresses. The edge routing device may identify the route in the route table that forwards the ingress network traffic destined for the block of public or private IP addresses to the network interface for the network appliance.

Routing ingress traffic for logically isolated networks destined for IP blocks without any network address translation

Disclosed are various embodiments for using unmanned vehicles to manage radio-based network infrastructure. In one embodiment, an unmanned vehicle is instructed to deliver a radio unit to a location to add coverage to a radio-based network.

Managing radio-based network infrastructure using unmanned vehicles

Disclosed are various embodiments for configurable security policies in radio-based networks. In one embodiment, a security event detection rule or a security event mitigation rule for a radio-based network is accessed. The radio-based network includes a radio access network and an associated core network. At least a portion of the radio-based network is operated by a cloud provider on behalf of an organization. A security event is detected based at least in part on the security event detection rule. At least one action is performed in response to the security event based at least in part on the security event mitigation rule.

Configurable security policies for radio-based networks

Growing community of inventors

Washington, DC, United States of America

Upendra Bhalchandra Shevade