Automated route propagation among networks attached to scalable virtual traffic hubs

Patent metadata

Field	Value
Publication number	US-11438255-B2
Application number	US-202117151014-A
Country	US
Kind code	B2
Filing date	Jan 15, 2021
Priority date	Sep 19, 2018
Publication date	Sep 6, 2022
Grant date	Sep 6, 2022

Abstract

Metadata indicating that a virtual traffic hub enabling connectivity between a plurality of isolated networks has been established is stored. A determination is made that a first entry of a first isolated network attached to the hub is to be represented in a second routing table of a second isolated network attached to the hub, e.g., to enable network packets originating at resources of the second isolated network to be transmitted via the hub to the first isolated network. A new entry corresponding to the first entry is included in the second routing table.

First claim

What is claimed is:

1. A computer-implemented method for distributed virtual routing, comprising:
performing, by a virtual traffic hub at a cloud computing environment, routing among a set of virtual networks which includes a first virtual network at a first geographic location and a second virtual network at a second geographic location;
detecting, by the virtual traffic hub, an addition of a third virtual network to the set of virtual networks;
determining, at least in part at the virtual traffic hub, one or more routing table updates associated with the detected addition; and
propagating, by the virtual traffic hub, a routing table update of the one or more routing table updates to a routing table associated with the first virtual network, thereby allowing routing between the first virtual network and the third virtual network.

2. The computer-implemented method for distributed virtual routing as recited in claim 1 , wherein the virtual traffic hub and the first and second virtual networks operate according to a hub-and-spoke network.

3. The computer-implemented method for distributed virtual routing as recited in claim 1 , wherein the first virtual network comprises one or more virtual machines of the cloud computing environment.

4. The computer-implemented method for distributed virtual routing as recited in claim 1 , further comprising:
establishing a connection between the virtual traffic hub and the third virtual network.

5. The computer-implemented method for distributed virtual routing as recited in claim 1 , wherein determining the one or more routing updates is performed after the addition of the third virtual network.

6. The computer-implemented method for distributed virtual routing as recited in claim 1 , wherein at least a portion of the first virtual network is located at a premise external to the cloud computing environment.

7. The computer-implemented method for distributed virtual routing as recited in claim 1 , further comprising:
determining a first subset and a second subset of the set of virtual networks, such that at least some routing information pertaining to traffic flowing within the first subset is not to be propagated to the second subset; and
propagating, by the virtual traffic hub, a first routing table update to one or more virtual networks of the first subset, without propagating the first routing table update to one or more virtual networks of the second subset.

8. A system, comprising:
one or more computing devices;
wherein the one or more computing devices include instructions that upon execution on or across the one or more computing devices cause the one or more computing devices to:
perform, at a virtual traffic hub at a cloud computing environment, routing among a set of virtual networks which includes a first virtual network at a first geographic location and a second virtual network at a second geographic location;
detect, by the virtual traffic hub, an addition of a third virtual network to the set of virtual networks;
determine, at least in part at the virtual traffic hub, one or more routing table updates associated with the detected addition; and
propagate, by the virtual traffic hub, a routing table update of the one or more routing table updates to a routing table associated with the first virtual network, thereby allowing routing between the first virtual network and the third virtual network.

9. The system as recited in claim 8 , wherein the virtual traffic hub and the first and second virtual networks are arranged in a hub-and-spoke configuration.

10. The system as recited in claim 8 , wherein the first virtual network comprises one or more virtual machines.

11. The system as recited in claim 8 , wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices further cause the one or more computing devices to:
establish a connection between the virtual traffic hub and the third virtual network.

12. The system as recited in claim 8 , wherein the one or more routing updates are determined after the addition of the third virtual network.

13. The system as recited in claim 8 , wherein at least a portion of the first virtual network is located at a premise external to the cloud computing environment.

14. The system as recited in claim 8 , wherein a first network address range of the first virtual network overlaps at least in part with a second network address range of the second virtual network.

15. One or more non-transitory computer-accessible storage media storing program instructions that when executed on or across one or more processors cause the one or more processors to:
perform, at a virtual traffic hub at a cloud computing environment, routing among a set of virtual networks which includes a first virtual network at a first geographic location and a second virtual network at a second geographic location;
detect, by the virtual traffic hub, an addition of a third virtual network to the set of virtual networks;
determine, at least in part at the virtual traffic hub, one or more routing table updates associated with the detected addition; and
propagate, by the virtual traffic hub, a routing table update of the one or more routing table updates to a routing table associated with the first virtual network, thereby allowing routing between the first virtual network and the third virtual network.

16. The one or more non-transitory computer-accessible storage media as recited in claim 15 , wherein the virtual traffic hub and the first and second virtual networks are arranged in a hub-and-spoke configuration.

17. The one or more non-transitory computer-accessible storage media as recited in claim 15 , wherein the third virtual network does not include a virtual machine configured using the cloud computing environment.

18. The one or more non-transitory computer-accessible storage media as recited in claim 15 , storing further program instructions that when executed on or across one or more processors further cause the one or more processors to:
establish a connection between the virtual traffic hub and the third virtual network.

19. The one or more non-transitory computer-accessible storage media as recited in claim 15 , wherein the one or more routing updates are determined after the addition of the third virtual network.

20. The one or more non-transitory computer-accessible storage media as recited in claim 15 , wherein at least a portion of the first virtual network is located at a premise external to the cloud computing environment.

Assignees

• Amazon Tech Inc

Inventors

• Tillotson Paul John
• Deb Bashuman
• Spendley Thomas
• Hashmi Omer
• Qian Baihu
• Penney Alexander Justin

Classifications

• H04L12/4633 Primary

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L45/04 Primary

  Interdomain routing, e.g. hierarchical routing · CPC title

• H04L45/74

  Address processing for routing · CPC title

• H04L45/742

  Route cache; Operation thereof · CPC title

• H04L2212/00

  Encapsulation of packets · CPC title