Associating route tables with ingress traffic to logically isolated networks
AssigneeAmazon Technologies, Inc.
InventorAndrew Bruce Dickinson
Life of this patent
Estimating the term…
Abstract
Route tables may be associated with ingress traffic for logically isolated networks. A routing device at the edge of a logically isolated network may receive a route to include in a route table that is associated with ingress traffic to the logically isolated network to forward the ingress traffic to a network appliance hosted in the logically isolated network. Network packets received at the edge routing device may have a destination of a computing resource hosted in the logically isolated network. The edge routing device may identify the route in the route table to override the destination in the network packet with the network appliance and forward the network packet to the network appliance according to the route.
Claims20
A system, comprising:
- a plurality of compute nodes, respectively comprising at least one processor and a memory to implement an edge routing device for a logically isolated network, a network manager for the logically isolated network, and a network appliance;
- wherein the network manager is configured to:
- receive, via an interface for the network manager, one or more requests that associate a route for a route table with ingress traffic received at the edge routing device to the logically isolated network to forward the ingress traffic to the network appliance hosted in the logically isolated network;
- provide the route to the edge routing device;
- wherein the edge routing device is configured to:
- receive the route for the route table;
- receive a network packet with a destination of a computing resource hosted in the logically isolated network;
- identify the route in the route table to encapsulate the destination in the network packet with a second destination for the network appliance;
- and
- forward the network packet to the network appliance according to the route identified in the route table;
- and
- wherein the network appliance is configured to process the network packet.
A method, comprising:
- receiving, at a routing device for a logically isolated network, a network packet with a destination of a computing resource hosted in the logically isolated network;
- identifying, by the routing device a route in a route table associated with ingress traffic to the logically isolated network to override the destination in the network packet with a network appliance hosted in the logically isolated network;
- and
- forwarding, by the routing device, the network packet to the network appliance according to the route identified in the route table, wherein the network packet is forwarded to the computing resource by the network appliance or another network appliance hosted in the logically isolated network.
One or more non-transitory, computer-readable storage media, storing program instructions that when executed on or across one or more computing devices cause the one or more computing devices to implement:
- receiving, at an routing device for a logically isolated network, a route for a route table associated with ingress traffic to the logically isolated network to forward the ingress traffic to a network appliance hosted in the logically isolated network;
- receiving, at the routing device, a network packet with a destination of a computing resource hosted in the logically isolated network;
- identifying, by the routing device the route in the route table to override the destination in the network packet with the network appliance;
- and
- forwarding, by the routing device, the network packet to the network appliance according to the route identified in the route table, wherein the network packet is forwarded to the computing resource by the network appliance or another network appliance hosted in the logically isolated network.
Dependencies are inferred from the claim text.