Group networking in an overlay network

Patent metadata

Field	Value
Publication number	US-9825822-B1
Application number	US-201414180278-A
Country	US
Kind code	B1
Filing date	Feb 13, 2014
Priority date	Feb 13, 2014
Publication date	Nov 21, 2017
Grant date	Nov 21, 2017

Abstract

A technology to create and manage a group network in a virtual network is described. A network address may be registered as a member of a network group in an overlay network within a virtualized computing environment. An open connection may be maintained to the network address. Membership information may be sent over the open connection to the network address as membership of the network group changes. Membership information may be used in communicating with the network group using unicast transmissions.

First claim

What is claimed is:

1. A non-transitory computer-readable medium storing a program causing a computer to perform a method for participating in a network group, comprising:
under control of one or more computer systems configured with executable instructions:
registering a virtualized computing instance as a member of a network group of virtualized computing instances, wherein the virtualized computing instance is configured to send unicast transmissions to members of the network group by directly addressing the unicast transmissions to the members of the network group, wherein a network address of the virtualized computing instance is registered with a network group manager, and wherein a server is configured with an instance manager that executes the virtualized computing instance and the virtualized computing instance is configured to execute an application;
maintaining an open connection between the virtualized computing instance and the network group manager;
receiving membership information for the network group intermittently over the open connection from the network group manager, the membership information including a plurality of network addresses of current members of the network group;
maintaining the plurality of network addresses on the virtualized computing instance using the membership information received from the network group manager via the open connection; and
sending the unicast transmissions from the virtualized computing instance to the plurality of network addresses of the current members of the network group, thereby creating a multicast transmission that is directly addressed to the current members of the network group.

2. The method of claim 1 , wherein registering the virtualized computing instance as a member of the network group comprises sending a request to a programmatic interface of the network group manager.

3. The method of claim 1 , further comprising deregistering the virtualized computing instance as a member of the network group by terminating the open connection to the network group manager.

4. The method of claim 1 , further comprising submitting authentication material while registering the virtualized computing instance as a member of the network group.

5. A computer implemented method, comprising:
under control of one or more computer systems configured with executable instructions:
registering a network address for a virtualized computing instance as a member of a network group of virtualized computing instances, wherein the virtualized computing instance is configured to send unicast transmissions to members of the network group by directly addressing the unicast transmissions to the members of the network group, wherein a server is configured with an instance manager that executes the virtualized computing instance and the virtualized computing instance is configured to execute an application;
maintaining an open connection to the network address for the virtualized computing instance; and
sending membership address information over the open connection to the network address for the virtualized computing instance, wherein the membership address information is used by the virtualized computing instance to directly communicate with the network group using the unicast transmissions, as membership of the network group changes.

6. The method of claim 5 , wherein maintaining the open connection comprises sending a keepalive transmission to the network address.

7. The method of claim 6 , further comprising deregistering the network address as a member of the network group if the keepalive transmission indicates that the open connection has been terminated.

8. The method of claim 5 , further comprising receiving authentication materials while registering the network address as a member of the network group.

9. The method of claim 5 , further comprising:
initiating a virtualized computing instance associated with the network address;
assigning an identifier to the virtualized computing instance; and
receiving notification that the virtualized computing instance with the identifier has access to the network group.

10. The method of claim 5 , further comprising:
initiating a virtualized computing instance associated with the network address; and
providing authentication materials to the virtualized computing instance upon initiating the virtualized computing instance.

11. The method of claim 5 , further comprising establishing a virtual private network connection with an external network to incorporate the external network into the virtual network to allow instances on the external network to join the network group.

12. A system for participating in a network group, comprising:
at least one processor;
a memory device including instructions that, when executed by the at least one processor, cause the system to:
execute a virtual network within a virtualized computing environment using an Internet Protocol (IP);
execute a plurality of virtualized computing instances on the virtual network, a subset of which are members of a network group, wherein a server is configured with an instance manager that executes the virtualized computing instance and the virtualized computing instance is configured to execute an application; and
execute a network group manager for the virtual network to manage network group information and send current membership address information to members of the network group for use in communicating with the network group using unicast transmissions to create a multicast transmission, wherein the members of the network group receive the current membership address information from the network group manager via an open connection and send unicast transmissions directly addressed to current members of the network group, thereby creating the multicast transmission to the current members of the network group.

13. The system of claim 12 , wherein the virtual network is a private virtualized network for a customer.

14. The system of claim 12 , wherein the network group manager registers a network address as a member of the network group upon establishment of an open connection.

15. The system of claim 12 , wherein the network group manager maintains an open transmission control protocol (TCP) connection with a network address that is a member of the network group by sending periodic keepalive transmissions to the network address.

16. The system of claim 12 , wherein the network group manager deregisters a network address as a member of the network group if an open connection has been terminated.

17. The system of claim 12 , wherein the network group manager validates a credential of a virtualized computing instance attempting to register as a member of the network group.

18. The system of claim 17 , wherein the network group manager limits access to current membership information of the network group based in part on the credential and a network policy comprising a stored set of permissions associated with a set of credentials.

19. The system of claim 12 , wherein the memory device includes instructions that, when executed by the processor, causes the system to further execute a launcher to initiate a virtualized computing instance, assign an identifier to the virtualized computing instance, and notify the network group manager that the virtualized computing instance with the identifier has access to the network group.

20. The system of claim 12 , wherein the memory device includes instructions that, when executed by the processor, causes the system to f

Assignees

• Amazon Tech Inc

Inventors

• Holland Ryan Christopher

Classifications

• H04L12/4641

  Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title

• H04L41/046

  comprising network management agents or mobile agents therefor · CPC title

• H04L41/50 Primary

  Network service management, e.g. ensuring proper service fulfilment according to agreements · CPC title

• H04L41/5096

  wherein the managed service relates to distributed or central networked applications · CPC title

• H04L41/00

  Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks · CPC title