Automated route propagation among networks attached to scalable virtual traffic hubs

Patent metadata

Field	Value
Publication number	US-10897417-B2
Application number	US-201816136138-A
Country	US
Kind code	B2
Filing date	Sep 19, 2018
Priority date	Sep 19, 2018
Publication date	Jan 19, 2021
Grant date	Jan 19, 2021

Abstract

Metadata indicating that a virtual traffic hub enabling connectivity between a plurality of isolated networks has been established is stored. A determination is made that a first entry of a first isolated network attached to the hub is to be represented in a second routing table of a second isolated network attached to the hub, e.g., to enable network packets originating at resources of the second isolated network to be transmitted via the hub to the first isolated network. A new entry corresponding to the first entry is included in the second routing table.

First claim

What is claimed is:

1. A system, comprising:
one or more computing devices of a provider network;
wherein the one or more computing devices include instructions that upon execution on a processor cause the one or more computing devices to:
store metadata indicating that a virtual traffic hub is configured as an intermediary for network traffic between a first isolated network and a second isolated network, wherein the first isolated network has an associated first routing table, wherein the second isolated network has an associated second routing table, wherein the virtual traffic hub comprises a plurality of layers including (a) a routing decisions layer at which a routing action for a network packet is identified and (b) an action implementation layer at which routing actions identified at the routing decisions layer are performed;
determine that at least a first entry of the first routing table of the first isolated virtual network is to be represented in the second routing table of the second isolated virtual network to enable network packets originating at one or more resources of the second isolated network to be transmitted via the virtual traffic hub to one or more resources of the first isolated network;
cause a new entry to be inserted into the second routing table that corresponds to the first entry of the first routing table; and
cause, based at least in part on the new entry inserted into the second routing table, a network packet originating at a first resource of the second isolated network to be transmitted to a first action implementation node of the virtual traffic hub to enable the first action implementation node to perform a routing action identified at the routing decisions layer, wherein the routing action results in a transmission of contents of the network packet to the one or more resources of the first isolated network.

2. The system as recited in claim 1 , wherein at least one isolated network of the first and second isolated networks comprises an isolated virtual network established on behalf of a client of a virtualized computing service.

3. The system as recited in claim 1 , wherein at least some nodes of at least one layer of the virtual traffic hub comprise respective resources of the provider network, and wherein at least one isolated network of the first and second isolated networks comprises one or more resources external to the provider network.

4. The system as recited in claim 1 , wherein the instructions upon execution on the processor cause the one or more computing devices to:
in response to obtaining a first programmatic request to attach a third isolated network to the virtual traffic hub,
issue at least a second programmatic request to obtain at least a subset of contents of a third routing table of the third isolated network; and
cause new entries corresponding to one or more entries of the third routing table to be stored in a fourth routing table of a fourth isolated network.

5. The system as recited in claim 4 , wherein the instructions upon execution on the processor cause the one or more computing devices to:
in response to obtaining the first programmatic request to attach the third isolated network to the virtual traffic hub, identify, based at least in part on routing domain metadata indicating groups of connected isolated networks, a set of one or more isolated networks whose route tables are to be updated, wherein the set comprises the fourth isolated network, and wherein the set does not comprise the first isolated network.

6. A method, comprising:
performing, at one or more computing devices:
determining that at least a first entry of a first routing table of a first isolated network programmatically attached to a virtual traffic hub is to be represented in a second routing table of a second isolated network programmatically attached to the virtual traffic hub to enable network packets originating at one or more resources of the second isolated network to be transmitted via the virtual traffic hub to one or more resources of the first isolated network;
causing a new entry to be included in the second routing table that corresponds to the first entry of the first routing table; and
implementing, at a first node of the virtual traffic hub, a routing action identified at a second node of the virtual traffic hub, resulting in a transmission of contents of a network packet originating at the one or more resources of the second isolated network to the one or more resources of the first isolated network, wherein the routing action is identified using an entry added to the second routing table.

7. The method as recited in claim 6 , wherein at least one isolated network of the first and second isolated networks comprises an isolated virtual network established on behalf of a client of a virtualized computing service.

8. The method as recited in claim 6 , wherein the virtual traffic hub comprises a plurality of nodes, wherein at least some nodes of the virtual traffic hub comprise respective resources of a provider network, and wherein at least one isolated network of the first and second isolated networks comprises one or more resources external to the provider network.

9. The method as recited in claim 6 , further comprising performing, by the one or more computing devices:
in response to obtaining a first programmatic request to attach a third isolated network to the virtual traffic hub,
issuing at least a second programmatic request to obtain at least a subset of contents of a third routing table of the third isolated network; and
causing new entries corresponding to one or more entries of the third routing table to be stored in a fourth routing table of a fourth isolated network.

10. The method as recited in claim 9 , further comprising performing, by the one or more computing devices:
in response to obtaining the first programmatic request to attach the third isolated network to the virtual traffic hub, identifying, based at least in part on routing domain metadata indicating groups of connected isolated networks, a set of one or more isolated networks whose route tables are to be updated, wherein the set comprises the fourth isolated network, and wherein the set does not comprise the first isolated network.

11. The method as recited in claim 6 , further comprising performing, by the one or more computing devices:
in response to determining that an overlap exists between a network address range represented in a third routing table of a third isolated network, and a network address range represented in the first routing table, initiating one or more overlap response actions.

12. The method as recited in claim 11 , wherein the one or more overlap response actions include one or more of: (a) providing an indication of the overlap via a programmatic interface or (b) obtaining a translation mapping to be used to modify a second routing table entry of the third routing table, and causing the modified version of the second routing table entry to be stored in the first routing table.

13. The method as recited in claim 11 , further comprising performing, by the one or more computing devices:
obtaining, via a programmatic interface, an indication of the one or more overlap response actions to be performed.

14. The method as recited in claim 6 , further comprising performing, by the one or more computing devices:
obtaining, via a programmatic interface, a request to provide automated address translation for propagated routing table entries with overlapping address ranges; and
in response to determining that an overlap exists between a network address range represented in

Assignees

• Amazon Tech Inc

Inventors

• Tillotson Paul John
• Deb Bashuman
• Spendley Thomas
• Hashmi Omer
• Qian Baihu
• Penney Alexander Justin

Classifications

• H04L45/04 Primary

  Interdomain routing, e.g. hierarchical routing · CPC title

• H04L12/4633 Primary

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L45/7453

  using hashing · CPC title

• H04L45/742

  Route cache; Operation thereof · CPC title

• H04L2212/00

  Encapsulation of packets · CPC title