Automated route propagation among networks attached to scalable virtual traffic hubs

Patent metadata

Field	Value
Publication number	US-12301443-B2
Application number	US-202318537691-A
Country	US
Kind code	B2
Filing date	Dec 12, 2023
Priority date	Sep 19, 2018
Publication date	May 13, 2025
Grant date	May 13, 2025

Abstract

Metadata indicating that a virtual traffic hub enabling connectivity between a plurality of isolated networks has been established is stored. A determination is made that a first entry of a first isolated network attached to the hub is to be represented in a second routing table of a second isolated network attached to the hub, e.g., to enable network packets originating at resources of the second isolated network to be transmitted via the hub to the first isolated network. A new entry corresponding to the first entry is included in the second routing table.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
configuring, using resources of a cloud computing environment, based at least in part on a first programmatic request, a first virtual gateway to route traffic of a first set of networks;
establishing, based at least in part on a second programmatic request, connectivity between the first virtual gateway and a second virtual gateway at a different location from the first virtual gateway; and
causing, using at least the first virtual gateway and the second virtual gateway, one or more packets originating at a first network of the set of networks to be transmitted to a second network.

2. The computer-implemented method as recited in claim 1 , wherein the first network comprises a virtual network of a virtualized computing service of the cloud computing environment.

3. The computer-implemented method as recited in claim 1 , wherein at least one network of the first network and the second network comprises a resource at a premise external to the cloud computing environment.

4. The computer-implemented method as recited in claim 1 , wherein the first virtual gateway is configured in a first region of the cloud computing environment, and wherein the second virtual gateway is configured in a second region of the cloud computing environment.

5. The computer-implemented method as recited in claim 1 , wherein the cloud computing environment comprises at least a first availability zone and a second availability zone, wherein the first virtual gateway comprises a plurality of nodes, wherein at least one node of the first virtual gateway is configured within the first availability zone, and wherein at least one node of the first virtual gateway is configured within the second availability zone.

6. The computer-implemented method as recited in claim 1 , further comprising:
causing, using at least the first virtual gateway, and without using the second virtual gateway, a particular packet originating at the first network to be transmitted to a third network.

7. The computer-implemented method as recited in claim 1 , further comprising:
storing a traffic filtering rule of the second network; and
verifying, prior to causing a particular packet of the one or more packets to be transmitted to the second network, that transmission of the particular packet does not violate the traffic filtering rule.

8. A system, comprising:
one or more computing devices;
wherein the one or more computing devices include instructions that upon execution on or across the one or more computing devices:
configure, using resources of a cloud computing environment, based at least in part on a first programmatic request, a first virtual gateway to route traffic of a first set of networks;
establish, based at least in part on a second programmatic request, connectivity between the first virtual gateway and a second virtual gateway at a different location from the first virtual gateway; and
cause, using at least the first virtual gateway and the second virtual gateway, one or more packets originating at a first network of the set of networks to be transmitted to a second network.

9. The system as recited in claim 8 , wherein the first network comprises a virtual network of a virtualized computing service of the cloud computing environment.

10. The system as recited in claim 8 , wherein at least one network of the first network and the second network comprises a resource at a premise external to the cloud computing environment.

11. The system as recited in claim 8 , wherein the first virtual gateway is configured in a first region of the cloud computing environment, and wherein the second virtual gateway is configured in a second region of the cloud computing environment.

12. The system as recited in claim 8 , wherein the cloud computing environment comprises at least a first availability zone and a second availability zone, wherein the first virtual gateway comprises a plurality of nodes, wherein at least one node of the first virtual gateway is configured within the first availability zone, and wherein at least one node of the first virtual gateway is configured within the second availability zone.

13. The system as recited in claim 8 , wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices:
cause, using at least the first virtual gateway, and without using the second virtual gateway, a particular packet originating at the first network to be transmitted to a third network.

14. The system as recited in claim 8 , wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices:
store a traffic filtering rule of the second network; and
verify, prior to causing a particular packet of the one or more packets to be transmitted to the second network, that transmission of the particular packet does not violate the traffic filtering rule.

15. One or more non-transitory computer-accessible storage media storing program instructions that when executed on or across one or more processors:
configure, using resources of a cloud computing environment, based at least in part on a first programmatic request, a first virtual gateway to route traffic of a first set of networks;
establish, based at least in part on a second programmatic request, connectivity between the first virtual gateway and a second virtual gateway at a different location from the first virtual gateway; and
cause, using at least the first virtual gateway and the second virtual gateway, one or more packets originating at a first network of the set of networks to be transmitted to a second network.

16. The one or more non-transitory computer-accessible storage media as recited in claim 15 , wherein the first network comprises a virtual network of a virtualized computing service of the cloud computing environment.

17. The one or more non-transitory computer-accessible storage media as recited in claim 15 , wherein at least one network of the first network and the second network comprises a resource at a premise external to the cloud computing environment.

18. The one or more non-transitory computer-accessible storage media as recited in claim 15 , wherein the first virtual gateway is configured in a first region of the cloud computing environment, and wherein the second virtual gateway is configured in a second region of the cloud computing environment.

19. The one or more non-transitory computer-accessible storage media as recited in claim 15 , wherein the cloud computing environment comprises at least a first availability zone and a second availability zone, wherein the first virtual gateway comprises a plurality of nodes, wherein at least one node of the first virtual gateway is configured within the first availability zone, and wherein at least one node of the first virtual gateway is configured within the second availability zone.

20. The one or more non-transitory computer-accessible storage media as recited in claim 15 , storing further program instructions that when executed on or across the one or more processors:
cause, using at least the first virtual gateway, and without using the second virtual gateway, a particular packet originating at the first network to be transmitted to a third network.

Assignees

• Amazon Tech Inc

Inventors

• Tillotson Paul John
• Deb Bashuman
• Spendley Thomas
• Hashmi Omer
• Qian Baihu
• Penney Alexander Justin

Classifications

• H04L45/306

  Route determination based on the nature of the carried application · CPC title

• H04L47/2483

  involving identification of individual flows · CPC title

• H04L2212/00

  Encapsulation of packets · CPC title

• H04L12/4633 Primary

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L45/74

  Address processing for routing · CPC title