Back to results
US 10,833,949 B2Granted
Extension resource groups of provider network services
AssigneeAmazon Technologies, Inc.
InventorsAnthony Nicholas Liguori, Matthew Shawn Wilson
Life of this patent
Estimating the term…
Abstract
At a network manager of an extension resource group of a provider network, a message comprising a command to launch a compute instance is received at an address which is part of a first network configured at a premise external to the provider network. The extension resource group includes a first host at the external premise. Within a second network configured at the external premise, the first host is assigned an address within a second address range. Addresses within the second range are also assigned to hosts within the provider network. The command is transmitted to the first host, and a compute instance is instantiated.
Claims20
A system, comprising:
- a first network manager;
- and
- one or more computing devices of an extension resource group of a virtualized computing service of a provider network, wherein the extension resource group includes at least a first virtualization host comprising a tamper-resistant storage device and a trusted platform module, wherein the first virtualization host is located at a first premise external to the provider network, wherein a first network configured at the first premise comprises a first range of network addresses, and wherein virtualization hosts of the virtualized computing service located at one or more data centers of the provider network are assigned respective network addresses from a second range of network addresses;
- wherein the first network manager includes instructions that upon execution on a processor cause the first network manager to:
- obtain, via a secure network channel, a message comprising a virtual machine launch command, transmitted from a first outbound command communicator associated with the extension resource group, wherein the virtual machine launch command is generated in response to a request submitted via a public application programming interface of the virtualized computing service, and wherein a destination address of the message, assigned to the first network manager, is within the first range of network addresses;
- and
- transmit the virtual machine launch command from the first network manager to a first virtualization host of the extension resource group, wherein processing of the virtual machine launch command at the first virtualization host results in an instantiation of a virtual machine at the first virtualization host, and wherein, within a private network established at the first extension resource group, the first virtualization host is assigned an address from the second range.
4 more elements
A method, comprising:
- obtaining, at a first network manager of an extension resource group of a virtualized computing service of a provider network, a message comprising a virtual machine launch command to launch a compute instance at a first host of the extension resource group, wherein the first host comprises a tamper-resistant storage device and a trusted platform module and is located at a first premise external to the provider network, wherein the message is obtained by the first network manager from a first outbound command communicator associated with the extension resource group at an address within a first address range of a first network configured at the first premise, wherein the virtual machine launch command is generated in response to a request submitted via a public application programming interface of the virtualized computing service;
- and
- transmitting the virtual machine launch command from the first network manager to the first host to cause the first host to instantiate the compute instance, wherein, within a second network configured at the first premise, the first host is assigned an address within a second address range, wherein one or more addresses of the second address range are assigned to respective hosts within the provider network by a control plane of the provider network.
One or more non-transitory computer readable storage media storing program instructions executable on or across one or more processors cause the one or more processors to:
- obtain, at a first network manager of an extension resource group of a virtualized computing service of a provider network, a message comprising a virtual machine launch command to launch a compute instance at a first host of the extension resource group, wherein the first host comprises a tamper-resistant storage device and a trusted platform module and is located at a first premise external to the provider network, wherein the message is obtained by the first network manager from a first outbound command communicator associated with the extension resource group at an address within a first address range of a first network configured at the first premise, wherein the virtual machine launch command is generated in response to a request submitted via a public application programming interface of the virtualized computing service;
- and
- cause transmission of the virtual machine launch command from the first network manager to the first host to cause the first host to instantiate the compute instance, wherein, within a second network configured at the first premise, the first host is assigned an address within a second address range, wherein one or more addresses of the second address range are assigned to respective hosts within the provider network by a control plane of the provider network.
Dependencies are inferred from the claim text.