Visualization of network address space

Patent metadata

Field	Value
Publication number	US-12388784-B1
Application number	US-202318475893-A
Country	US
Kind code	B1
Filing date	Sep 27, 2023
Priority date	Sep 27, 2023
Publication date	Aug 12, 2025
Grant date	Aug 12, 2025

Abstract

Disclosed are various embodiments for visualization of network address space. In one embodiment, a network address block assigned to an entity in a network addressing scheme is determined. A user interface is generated that visually represents the network addressing scheme with a plurality of rows. Individual rows represent divisions of a corresponding network prefix length in the network addressing scheme. The user interface indicates a location of the network address block.

First claim

Therefore, the following is claimed:

1. A system, comprising:
a cloud provider network that hosts virtual private cloud networks on behalf of a plurality of customers; and
at least one computing device configured to at least:
determine a network address block assigned to a customer of the cloud provider network in a network addressing scheme;
generate a user interface that visually represents the network addressing scheme in a table having a plurality of rows, individual rows of the plurality of rows representing divisions of a corresponding network prefix length in the network addressing scheme;
indicate in the user interface a location of the network address block;
indicate in the user interface a compliance status of the network address block, the compliance status indicating whether an allocation of network addresses in the network address block is compliant or non-compliant with a rule established by the cloud provider network; and
indicate in the user interface a network address utilization of a virtual private cloud network of the customer that is allocated at least a portion of the network address block;
wherein the location is color coded to indicate the compliance status of the network address block, and the allocation is deemed non-compliant in response to the allocation being into a first region of the cloud provider network that differs from a second region of the cloud provider network that is associated with the network address block.

2. The system of claim 1 , wherein the at least one computing device is further configured to at least:
receive a user selection of the location of the network address block;
update the user interface to show a different row having divisions of a different network prefix length; and
indicate a more specific location of the network address block in the different row.

3. The system of claim 1 , wherein the location is further color coded to indicate whether the network address block includes an overlap of another network address block.

4. The system of claim 1 , wherein the cloud provider network comprises a plurality of regions, and the user interface indicates a corresponding region of the plurality of regions for individual subnets of a plurality of subnets in the network address block.

5. The system of claim 1 , wherein at least one of: a quantity of rows or a quantity of divisions shown in the user interface is determined based at least in part on an available display area for the user interface on a client device.

6. The system of claim 1 , wherein the user interface includes a first set of rows as the plurality of rows, and the user interface includes selectable components that in response to selection cause the user interface to replace the first set of rows with a second set of rows representing a different set of network prefix lengths in the network addressing scheme.

7. The system of claim 1 , wherein the user interface includes selectable components that in response to selection cause the user interface to move the plurality of rows to different divisions of the corresponding network prefix lengths in the network addressing scheme.

8. A computer-implemented method, comprising:
hosting, by a cloud provider network, virtual private cloud networks on behalf of a plurality of entities;
determining a network address block assigned to an entity in a network addressing scheme;
generating a user interface that visually represents the network addressing scheme in a table with a plurality of rows, individual rows of the plurality of rows representing divisions of a corresponding network prefix length in the network addressing scheme;
indicating a location of the network address block in the user interface;
indicating in the user interface a compliance status of the network address block, the compliance status indicating whether an allocation of network addresses in the network address block is compliant or non-compliant with a rule established by the cloud provider network; and
indicating in the user interface a network address utilization of a virtual private cloud network of the entity that is allocated at least a portion of the network address block;
wherein the location is color coded to indicate the compliance status of the network address block, and the allocation is deemed non-compliant in response to the allocation being into a first region of the cloud provider network that differs from a second region of the cloud provider network that is associated with the network address block.

9. The computer-implemented method of claim 8 , wherein the allocation is deemed non-compliant further in response to the rule requiring a different allocation size than the allocation.

10. The computer-implemented method of claim 8 , further comprising indicating respective locations of a plurality of subdivisions of the network address block in the user interface.

11. The computer-implemented method of claim 10 , further comprising indicating respective statuses of the plurality of subdivisions of the network address block using a corresponding color or a corresponding indicium.

12. The computer-implemented method of claim 8 , further comprising updating the user interface to show a different row having divisions of a different network prefix length.

13. The computer-implemented method of claim 8 , further comprising:
receiving a user selection of the location of the network address block;
updating the user interface to show a different row having divisions of a different network prefix length; and
indicating a more specific location of the network address block in the different row.

14. A computer-implemented method, comprising:
generating a user interface that visually represents a network addressing scheme in a table having a plurality of rows, individual rows of the plurality of rows representing divisions of a corresponding network prefix length in the network addressing scheme;
receiving a navigation command;
updating the user interface to show a different set of rows corresponding to different network prefix lengths in the network addressing scheme;
indicating a location of each of a plurality of network address blocks represented in the user interface;
indicating in the user interface a compliance status for each of the plurality of network address blocks represented in the user interface, the compliance status indicating whether a network address block includes an allocation of network addresses that is compliant or non-compliant with a rule established by a cloud provider network; and
indicating, for each network address block represented in the user interface, a network address utilization of the network addresses in the network address block;
wherein the location of each of the plurality of network address blocks represented in the user interface is color coded to indicate the compliance status of the network address block, and the allocation is deemed non-compliant in response to the allocation being into a first region of the cloud provider network that differs from a second region of the cloud provider network that is associated with the network address block in which the allocation is included.

15. The computer-implemented method of claim 14 , wherein the user interface comprises a legend indicating indicia or colors corresponding to a plurality of statuses of network address blocks represented in the user interface.

16. The computer-implemented method of claim 14 , wherein receiving the navigation command further comprises receiving a user selection of a navigation component in the user interface.

Assignees

• Amazon Tech Inc

Inventors

• Kim Simon Young-Min
• Das Shovan Kumar
• Mccarthy Geoffrey
• Mahon Patrick Charles
• Gray James Alexander
• Davis Quintin Parker
• Patry Julien Mathieu

Classifications

• H04L61/5007

  Internet protocol [IP] addresses · CPC title

• H04L2101/668

  Internet protocol [IP] address subnets · CPC title

• H04L61/5061 Primary

  Pools of addresses · CPC title