Dynamic network address space allocation for virtual networks

Patent metadata

Field	Value
Publication number	US-10693715-B1
Application number	US-201715794584-A
Country	US
Kind code	B1
Filing date	Oct 26, 2017
Priority date	Oct 26, 2017
Publication date	Jun 23, 2020
Grant date	Jun 23, 2020

Abstract

Techniques for dynamic allocation of network address spaces in virtual networks implemented in a service provider system are described. Upon a scaling condition of an allocation rule being determined to be satisfied, a network address space of a virtual network can be automatically expanded or contracted. The scaling condition can be specified by a customer associated with the virtual network. The allocation rule may also include a allocation factor that indicates an amount of network addresses that are to be added to or removed from the virtual network.

First claim

What is claimed is:

1. A computer-implemented method comprising:
receiving, via an application programming interface (API), a first request to configure an allocation rule to dynamically allocate a network address space for a virtual network implemented in a service provider system, wherein the allocation rule comprises a condition that is based on a current utilization of network addresses within the virtual network and further comprises an allocation factor that indicates how the network address space is to be changed when the condition is satisfied;
monitoring the current utilization of network addresses within the virtual network;
determining that the condition of the allocation rule is satisfied;
determining, based at least on the allocation factor, a new size for the network address space to be made available for the virtual network, wherein the network address space has an initial size that is smaller than the new size;
configuring the network address space of the virtual network to be of the new size, wherein prior to the configuring of the network address space to be of the new size the network address space comprises a first range of network addresses, and wherein after the configuring of the network address space to be of the new size the network address space comprises a second range of network addresses;
receiving, via the API, a second request that specifies at least one subnet for the virtual network that is to be configured within the second range of network addresses; and
configuring the at least one subnet in the virtual network.

2. The computer-implemented method of claim 1 , wherein determining that the condition of the allocation rule is satisfied comprises determining that the current utilization of network addresses meets or exceeds a threshold amount of the network address space, and wherein the method further comprises:
identifying the second range of network addresses as not conflicting with the network address space,
wherein configuring the network address space of the virtual network to be of the new size comprises updating a routing table for the virtual network to include an entry for the second range of network addresses that indicates that the second range of network addresses are part of the virtual network.

3. A computer-implemented method comprising:
determining that a condition of an allocation rule is satisfied, wherein the condition is based on a current utilization of network addresses within a network address space associated with a virtual network implemented in a service provider system, wherein the network address space has an initial size;
determining a new size for the network address space that is different than the initial size, wherein the new size is larger than the initial size;
configuring the network address space associated with the virtual network to be of the new size, wherein prior to the configuring of the network address space to be of the new size the network address space comprises a first range of network addresses, and wherein after the configuring of the network address space to be of the new size the network address space comprises a second range of network addresses;
receiving, via an application programming interface (API), a request that specifies at least one subnet for the virtual network that is to be configured within the second range of network addresses; and
configuring the at least one subnet in the virtual network.

4. The computer-implemented method of claim 3 , further comprising:
receiving, via the API of the service provider system, a request to configure the allocation rule to dynamically allocate the network address space for the virtual network.

5. The computer-implemented method of claim 4 , wherein the request further comprises an allocation factor that indicates how the network address space is to be changed when the condition is satisfied, and wherein the determining the new size is based at least in part on the allocation factor.

6. The computer-implemented method of claim 3 , wherein the second range of network addresses is contiguous with the first range of network addresses.

7. The computer-implemented method of claim 3 , wherein the second range of network addresses is not contiguous with the first range of network addresses.

8. The computer-implemented method of claim 3 , further comprising:
receiving, via the API, a request that indicates that one or more resource instances are to be launched in the at least one subnet of the virtual network;
launching the one or more resource instances; and
assigning one or more network addresses from the second range of network addresses to the one or more resource instances.

9. The computer-implemented method of claim 3 , further comprising:
determining that the second range of network addresses does not conflict with a third range of network addresses.

10. The computer-implemented method of claim 9 , wherein the third range of network addresses includes one or more of:
one or more addresses of another virtual network implemented by the service provider system, wherein the another virtual network is connected to the virtual network via a peering connection; or
one or more network addresses of another network that is external to the service provider system that is connected to the virtual network across an intermediate network.

11. The computer-implemented method of claim 3 , further comprising:
determining that a range of network addresses that are within the network address space are not utilized; and
removing the range of network addresses from the network address space.

12. The computer-implemented method of claim 3 , further comprising:
after configuring the network address space of the virtual network to be of the new size, transmitting an indication that the size of the network address space has changed.

13. A system comprising:
one or more compute instances implemented by a first one or more electronic devices that operate within a virtual network implemented in a service provider system; and
a control plane implemented by a second one or more electronic devices, wherein the control plane comprises instructions which, when executed by the second one or more electronic devices, cause the control plane to:
determine whether a condition of an allocation rule is satisfied, wherein the condition is based on a current utilization of network addresses within a network address space associated with the virtual network, wherein the network address space has an initial size;
determine a new size for the network address space that is different than the initial size, wherein the new size is larger than the initial size;
configure the network address space associated with the virtual network to be of the new size, wherein prior to the configuration of the network address space to be of the new size the network address space comprises a first range of network addresses, and wherein after the configuration of the network address space to be of the new size the network address space comprises a second range of network addresses;
receive, via an application programming interface (API), a request that specifies at least one subnet for the virtual network that is to be configured within the second range of network addresses; and
configure the at least one subnet in the virtual network.

14. The system of claim 13 , wherein the instructions, when executed by the second one or more electronic devices, further cause the control plane to:
receive, via the API of the service provider system, a request to configure the allocation rule to dynamically allocate the network address space for

Assignees

• Amazon Tech Inc

Inventors

• Strauss Benjamin David
• Lennon David Brian

Classifications

• H04L2101/668

  Internet protocol [IP] address subnets · CPC title

• H04L61/5007

  Internet protocol [IP] addresses · CPC title

• H04L61/4511

  using domain name system [DNS] · CPC title

• H04L61/2592

  using tunnelling or encapsulation · CPC title

• H04L61/2514 Primary

  between local and global IP addresses · CPC title