Wide area networking service using provider network backbone network

Patent metadata

Field	Value
Publication number	US-11601365-B2
Application number	US-202117218036-A
Country	US
Kind code	B2
Filing date	Mar 30, 2021
Priority date	Mar 30, 2021
Publication date	Mar 7, 2023
Grant date	Mar 7, 2023

Abstract

An indication of a set of premises between which network traffic is to be routed via a private fiber backbone of a provider network is obtained. Respective virtual routers are configured for a first premise and a second premise, and connectivity is established between the virtual routers and routing information sources at the premises. Contents of at least one network packet originating at the first premise are transmitted to the second premise via the private fiber backbone using routing information obtained at the virtual routers from the routing information source at the second premise.

First claim

What is claimed is:

1. A system, comprising:
one or more computing devices;
wherein the one or more computing devices include instructions that upon execution on or across the one or more computing devices cause the one or more computing devices to:
obtain, via one or more programmatic interfaces of a wide area networking service of a provider network, an indication of (a) a plurality of client premises between which network traffic is to be routed via a private fiber backbone of the provider network, including a first premise in a first geographical region and a second premise in a second geographical region and (b) a particular protocol to be used to obtain dynamic routing information pertaining to at least the first and second premises, wherein the provider network includes a virtualized computing service;
configure a first virtual router using at least a first set of resources of the virtualized computing service at a first provider network data center which meets a proximity criterion with respect to the first premise, and a second virtual router using at least a second set of resources at a second provider network data center which meets the proximity criterion with respect to the second premise;
enable connectivity between (a) the first virtual router and the second virtual router, (b) the first virtual router and a first dynamic routing information source at the first premise, and (c) the second virtual router and a second dynamic routing information source at the second premise; and
cause contents of at least one network packet originating at the first premise to be transferred, using a set of routing information, via the private fiber backbone to the second premise, wherein at least a portion of the set of routing information is obtained from the second dynamic routing information source by a protocol processing engine associated with the second virtual router, and wherein the protocol processing engine is configured to process messages of the particular protocol.

2. The system as recited in claim 1 , wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices cause the one or more computing devices to:
cause to be presented, via the one or more programmatic interfaces, one or more metrics of network traffic flowing between the first geographic region and the second geographic region via the private fiber backbone.

3. The system as recited in claim 2 , wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices cause the one or more computing devices to:
obtain, via the one or more programmatic interfaces, an indication of a particular granularity at which the one or more metrics are to be presented, selected from a set of granularities which includes (a) region-level granularity, (b) premise-level granularity, or (c) isolated network-level granularity, wherein the one or metrics are presented at the particular granularity.

4. The system as recited in claim 1 , wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices cause the one or more computing devices to:
obtaining, via the one or more programmatic interfaces, an indication of a diversion criterion for traffic directed to a first set of network endpoints in the second geographical region;
determining that the diversion criterion has been met; and
causing, in response to said determining, a particular network packet originating in the first geographical region to be delivered via the first virtual router to a network endpoint in a third geographical region, wherein an initial destination address of the particular network packet is an address of a network endpoint of the first set.

5. The system as recited in claim 1 , wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices cause the one or more computing devices to:
obtain, via the one or more programmatic interfaces, an indication of an additional premise, wherein network traffic between the additional premise and one or more premises of the plurality of client premises is to be transmitted via the private fiber backbone; and
propagate routing information pertaining to the additional premise to one or more virtual routers, including the first virtual router and the second virtual router, without requiring static routes to the additional premise to be specified.

6. A computer-implemented method, comprising:
obtaining, via one or more programmatic interfaces, an indication of a plurality of premises between which network traffic is to be routed via a private fiber backbone of a provider network, including a first premise in a first geographical region and a second premise in a second geographical region;
establishing a first virtual router using a first set of resources which meets a proximity criterion with respect to the first premise, and a second virtual router using a second set of resources which meets the proximity criterion with respect to the second premise;
enabling connectivity between (a) the first virtual router and the second virtual router, (b) the first virtual router and a first dynamic routing information source at the first premise, and (c) the second virtual router and a second dynamic routing information source at the second premise; and
causing contents of at least one network packet originating at the first premise to be transferred, using a first set of routing information, via the private fiber backbone to the second premise, wherein at least a portion of the first set of routing information is obtained from the second dynamic routing information source by the second virtual router.

7. The computer-implemented method as recited in claim 6 , further comprising:
obtaining, via the one or more programmatic interfaces, an indication of a custom action to be performed with respect to at least some network packets transmitted between the first geographical region and a second geographical region; and
performing the custom action for a particular network packet.

8. The computer-implemented method as recited in claim 7 , wherein the custom action comprises storing an audit log record.

9. The computer-implemented method as recited in claim 6 , further comprising:
obtaining a request via a programmatic interface to enable connectivity between the first premise and an isolated virtual network of a virtualized computing service of a provider network; and
modifying a configuration of the first virtual router to enable the connectivity between the first premise and the isolated virtual network.

10. The computer-implemented method as recited in claim 6 , wherein the portion of the first set of routing information is obtained in a session of a version of the Border Gateway Protocol (BGP).

11. The computer-implemented method as recited in claim 6 , wherein establishing connectivity between the first virtual router and the first dynamic routing information source comprises establishing one or more virtual private network (VPN) tunnels.

12. The computer-implemented method as recited in claim 6 , wherein connectivity between the first virtual router and the first dynamic routing information source is established using a dedicated physical link.

13. The computer-implemented method as recited in claim 6 , wherein the second dynamic routing information source comprises a software-defined wide area networking (SD-WAN) appliance, the computer-implemented method further comprising:
obtaining, via the one or more

Assignees

• Amazon Tech Inc

Inventors

• Qian Baihu
• Hashmi Omer
• Spendley Thomas Nguyen
• Deb Bashuman
• Kulkarni Shridhar
• Tillotson Paul John
• Ali Dousti Ramin
• Pulla Indira Radhika
• Ge Steve
• Lombardi Nicholas Ryan
• Matthews Nick
• Dawani Anoop

Classifications

• H04L45/586 Primary

  of virtual routers · CPC title

• H04L45/02

  Topology update or discovery · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L45/04 Primary

  Interdomain routing, e.g. hierarchical routing · CPC title

• H04L45/16

  Multipoint routing · CPC title