Configuration and management of scalable global private networks

Patent metadata

Field	Value
Publication number	US-11533231-B2
Application number	US-201916699424-A
Country	US
Kind code	B2
Filing date	Nov 29, 2019
Priority date	Nov 29, 2019
Publication date	Dec 20, 2022
Grant date	Dec 20, 2022

Abstract

This disclosure describes techniques for configuring and managing scalable global private networks associated with a service provider. Different input mechanisms, such as an API, a UI, or a CLI may be utilized to configure, and manage a global private network that spans across the cloud in different geographic locations and connects to different stand-alone networks. The user may proactively use the input mechanisms to configure and query different network resources to reactively configure settings for reacting to one or more events. The input mechanisms may also be utilized to define the network resources to be modeled within the global private network as well as connections within the global network. A user may configure events/metrics to be monitored, tasks/workflows to be performed, and the like. In some configurations, a network management service (NMS) may perform health monitoring and reachability monitoring to identify possible issues in the global network.

First claim

What is claimed is:

1. A system comprising:
one or more processors; and
one or more computer-readable media storing computer-executable instructions that, when executed by the one or more processors of one or more first computing devices of a service provider network, cause the one or more processors to:
receive, from a computing device of a user of the service provider network, a request to configure a global network that spans across a first geographic location and a second geographic location, and that includes a stand-alone network that is hosted by the service provider network and an external network that is separate from the service provider network;
identify a first action to perform to configure the global network within one or more of the first geographic location, the second geographic location, the stand-alone network, and the external network;
transmit instructions, to one or more second computing devices located in one or more of the first geographic location, the second geographic location, the stand-alone network, and the external network, to perform the first action;
receive, from the computing device of the user of the service provider network, a request to monitor at least one of: one or more events that occur within the global network, one or more alarms that occur within the global network, or metrics to be monitored within the global network;
cause monitoring data to be obtained from network resources and applications in at least the stand-alone network and the external network of the global network;
receive, from one or more second computing devices, the monitoring data obtained from the network resources and the applications that indicates an operational performance of the network resources and the applications;
identify, based at least in part on the monitoring data, an occurrence of an event indicating a change to the global network and a performance of gateways that connect different networks of the global network, VPCs, VPNs, devices within the global network, connections to the stand-alone networks, and paths between different endpoints within the global network;
cause one or more second actions to be performed within the global network via a global workflow at least partly in response to the monitoring data, wherein the global workflow executes one or more first tasks within a first network in the first geographic location and a second network in the second geographic location; and
cause one or more third actions to be performed within the stand-alone network via a regional workflow at least partly in response to the monitoring data, wherein the regional workflow executes one or more second tasks within the stand-alone network.

2. The system of claim 1 , wherein the instructions further cause the one or more processors to provide for display, to the computing device of the user, a graphical user interface (GUI) that includes user interface (UI) elements relating to configuring the global network, and querying the global network, and a graph display area that depicts a graphical representation of the global network, wherein the UI elements include a search UI element that is configured to receive a search term utilized to search the graph display area for one or more nodes of the graph display area that match the search term.

3. The system of claim 2 , wherein the instructions further cause the one or more processors to perform a static network reachability analysis to identify network connectivity between the different endpoints, wherein the static network reachability analysis utilizes formal methods that uses one or more mathematical models to model the global network.

4. The system of claim 1 , wherein the first action is selected from one or more of configuring a gateway to connect to the stand-alone network, configuring the gateway to connect to the first network in the first geographic location and the second network in the second geographic location, configuring a virtual private cloud (VPC), configuring a virtual private network (VPN), and configuring a connection from the service provider network to the external network; and wherein the global workflow causes one or more third tasks to be performed within the first network and the second network to restore the network connectivity between different network endpoints.

5. A computer-implemented method comprising:
receiving, at a service provider network, data associated with a request to configure a global network that includes a stand-alone network, a first network that is hosted by the service provider network within a first geographic location, and a second network that is hosted by the service provider network within a second geographic location;
identifying based, at least in part, on the data, one or more first actions to perform within one or more of the first network and the second network to configure the global network;
causing the one or more first actions to be performed within the one or more of the first network and the second network to configure the global network;
causing monitoring data to be obtained from one or more network resources of the global network based at least in part on a request by a user of the service provider network to monitor at least one of: one or more events that occur within the global network, one or more alarms that occur within the global network, or metrics to be monitored within the global network;
causing one or more second actions to be performed within the global network via a global workflow at least partly in response to the monitoring data, wherein the global workflow executes one or more first tasks within the first network in the first geographic location and the second network in the second geographic location; and
cause one or more third actions to be performed within the stand-alone network via a regional workflow at least partly in response to the monitoring data, wherein the regional workflow executes one or more second tasks within the stand-alone network.

6. The computer-implemented method of claim 5 , wherein the one or more first actions include one or more of configuring a gateway of the service provider network to connect to at least one of the one or more stand-alone networks, configuring the gateway to connect to the first network and the second network, configuring a virtual private cloud (VPC), configuring a virtual private network (VPN) to connect to the stand-alone network, and configuring a connection between the service provider network and the stand-alone network.

7. The computer-implemented method of claim 5 , wherein the stand-alone network includes a first external network that is separate from the service provider network and that is connected to the first network, and a second external network that is separate from the service provider network and that is connected to the second network.

8. The computer-implemented method of claim 5 , further comprising providing an application programming interface (API) that exposes functionality for configuring the global network, and wherein the data is received via the API.

9. The computer-implemented method of claim 5 , wherein causing the monitoring data to be obtained from the network resources of the global network, comprises:
receiving, from one or more first computing devices located in the first network, first monitoring data that indicates a first performance of first networking resources in the first network;
receiving, from one or more second computing devices located in the second network, second monitoring data that indicates a second performance of second networking resources in the second network; and
wherein causing the one or more second actions to be performed is based at least in part on the first monitoring da

Assignees

• Amazon Tech Inc

Inventors

• Qian Baihu
• Deb Bashuman
• Hashmi Omer
• Spendley Thomas Nguyen
• Cheruku Nikhil Reddy
• Mishra Alok
• Penney Alexander Justin

Classifications

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L41/22

  comprising specially adapted graphical user interfaces [GUI] · CPC title

• H04L43/0811 Primary

  by checking connectivity · CPC title

• H04L41/0893 Primary

  Assignment of logical groups to network elements · CPC title