Virtualized block storage servers in cloud provider substrate extension

Patent metadata

Field	Value
Publication number	US-10949124-B2
Application number	US-201916457850-A
Country	US
Kind code	B2
Filing date	Jun 28, 2019
Priority date	Jun 28, 2019
Publication date	Mar 16, 2021
Grant date	Mar 16, 2021

Abstract

A first block storage server virtual machine to host a first volume using one or more storage devices of a computer system is executed by the computer system. A second virtual machine having access to a virtual block storage device is executed by the computer system. A block storage client is executed by the computer system. A first block storage operation is received by the block storage client from the second virtual machine, the first block storage operation to perform on the virtual block storage device. A message is sent by the block storage client to the first block storage server virtual machine to cause the first block storage server virtual machine to perform the block storage operation with the first volume.

First claim

What is claimed is:

1. A computer-implemented method comprising:
executing, by a computer system, a first block storage server virtual machine to host a first volume using one or more storage devices of the computer system;
executing, by the computer system, a second virtual machine having access to a virtual block storage device;
executing, by the computer system, a block storage client, wherein executing the block storage client includes:
receiving, from the second virtual machine, a first block storage operation to perform on the virtual block storage device; and
sending a message to the first block storage server virtual machine to cause the first block storage server virtual machine to perform the first block storage operation with the first volume,

wherein the computer system is included in an extension of a provider network, the extension of the provider network is in communication with the provider network via at least an intermediate network; and
wherein an instance management service of the provider network initiated the execution of the first block storage server virtual machine and the second virtual machine by the computer system.

2. The computer-implemented method of claim 1 , wherein the message is sent via a virtual network secured using a key to encrypt and decrypt traffic sent via the virtual network.

3. The computer-implemented method of claim 2 , wherein a first virtual network address of the virtual network is associated with the first block storage server virtual machine and a second virtual network address of the virtual network is associated with the block storage client.

4. The computer-implemented method of claim 1 , wherein the first block storage server virtual machine and the second virtual machine are executed by a first one or more processors of the computer system and the block storage client is executed by a second one or more processors of the computer system.

5. The computer-implemented method of claim 1 , wherein the first block storage server virtual machine is a first virtual machine hosted by the computer system and the second virtual machine is a second virtual machine hosted by the computer system.

6. The computer-implemented method of claim 1 , further comprising executing, by the computer system, a second block storage server virtual machine to host a second volume using the one or more storage devices of the computer system, wherein the second volume is a replica associated with the first volume.

7. The computer-implemented method of claim 6 , wherein the first block storage server virtual machine executes using a first physical component of the computer system and the second block storage server virtual machine executes using a second physical component of the computer system that is different than the first physical component.

8. The computer-implemented method of claim 1 , wherein the first block storage operation is a write of a block of data, and wherein the block storage client is further to encrypt the block of data using an encryption key associated with the virtual block storage device to generate an encrypted block of data, and wherein the message sent to the first block storage server virtual machine includes the encrypted block of data and causes the first block storage server virtual machine to write the encrypted block of data to the first volume.

9. The computer-implemented method of claim 1 :
wherein the intermediate network is a third-party network.

10. A system comprising:
one or more storage devices of a host computer system; and
a first one or more processors of the host computer system to execute a first block storage server application and a second application having access to a virtual block storage device, the first block storage server application including instructions that upon execution cause the first block storage server application to host a first volume using the one or more storage devices;
a second one or more processors of the host computer system to execute a block storage client application, the block storage client application including instructions that upon execution cause the block storage client application to:
receive, from the second application, a first block storage operation to perform on the virtual block storage device; and
send a message to the first block storage server application to cause the first block storage server application to perform the first block storage operation with the first volume;

wherein the host computer system is included in an extension of a provider network, the extension of the provider network is in communication with the provider network via at least an intermediate network; and
wherein an instance management service of the provider network initiated the execution of the first block storage server application and the second application by the host computer system.

11. The system of claim 10 , wherein the message is sent via a virtual network secured using a key to encrypt and decrypt traffic sent via the virtual network.

12. The system of claim 11 , wherein a first virtual network address of the virtual network is associated with the first block storage server application and a second virtual network address of the virtual network is associated with the block storage client application.

13. The system of claim 10 , wherein the first block storage server application is executed within a first virtual machine hosted by the host computer system and the second application is executed within a second virtual machine hosted by the host computer system.

14. The system of claim 10 , wherein the first one or more processors of the host computer system are to further execute a second block storage server application, the second block storage server application including instructions that upon execution cause the second block storage server application to host a second volume using the one or more storage devices of the host computer system, wherein the second volume is a replica associated with the first volume.

15. The system of claim 14 , wherein the first block storage server application executes using a first physical component of the computer system and the second block storage server application executes using a second physical component of the computer system that is different than the first physical component.

16. The system of claim 10 , wherein the first block storage operation is a write of a block of data, wherein the block storage client application includes further instructions that upon execution cause the block storage client application to encrypt the block of data using an encryption key associated with the virtual block storage device to generate an encrypted block of data, and wherein the message sent to the first block storage server application includes the encrypted block of data and causes the first block storage server application to write the encrypted block of data to the first volume.

17. The system of claim 10 :
wherein the intermediate network is a third-party network.

18. A computer-implemented method comprising:
executing, by a first one or more processors of a first computer system in an extension of a provider network, the extension of the provider network is in communication with the provider network via at least an intermediate network, a block storage server virtual machine to host a first storage volume using one or more storage devices of the first computer system;
executing, by the first one or more processors, a customer virtual machine having access to a virtual block storage device;
executing

Assignees

• Amazon Tech Inc

Inventors

• Liguori Anthony Nicholas
• Olson Marc Stephen

Classifications

• G06F3/0658

  Controller construction arrangements · CPC title

• G06F3/0626

  Reducing size or complexity of storage systems · CPC title

• G06F3/0671

  In-line storage system · CPC title

• G06F3/0664

  at device level, e.g. emulation of a storage device or system · CPC title

• H04L9/0819

  Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) (network architectures or network communication protocols for key distribution in a packet data network H04L63/062) · CPC title