# US 11,451,467 B2 · Global-scale connectivity using scalable virtual traffic hubs > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,467 B2 - Document ID: US11451467B2 - Status: Granted - Kind: B2 - Application number: 17/000,150 - Filed: 2020-08-21 - Published: 2021-02-11 - Granted: 2022-09-20 - Earliest claimed: 2018-11-20 - Assignees: Amazon Technologies, Inc. - Applicants: Amazon Technologies, Inc. - Inventors: Bashuman Deb; Paul John Tillotson; Thomas Nguyen Spendley; Omer Hashmi; Baihu Qian; Mohamed Nader Farahat Hassan - Web page: https://patentgrep.com/patent/US11451467B2 ## CPC - H04L 45/04: {Interdomain routing, e.g. hierarchical routing} - H04L 45/42: Centralised routing - H04L 45/124: {using a combination of metrics} - H04L 45/46: {Cluster building} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Network pathways are identified to transfer packets between a pair of regional virtual traffic hubs of a provider network. At a first hub of the pair, a first action is performed, resulting in a transmission of a packet received from a first isolated network to the second hub along a pathway selected using dynamic routing parameters. At the second hub, a second action is performed, resulting in the transmission of the packet to a destination within a second isolated network. ## Claims ### Claim 1 A computer-implemented method, comprising: establishing, using one or more cloud resources, a hub for network connectivity between a plurality of networks, including at least a first virtual network and a second virtual network; storing, in response to one or more programmatic requests, at least a portion of a route table to be used at the hub for traffic flowing between the first virtual network and the second virtual network; and transmitting, via the hub in accordance with the route table, one or more network packets from the first virtual network to the second virtual network. ### Claim 2 (depends on 1) The computer-implemented method as recited in claim 1, further comprising: in response to another programmatic request, propagating one or more entries to the route table, wherein the one or more entries include an address within a network associated with the hub. ### Claim 3 (depends on 1) The computer-implemented method as recited in claim 1, further comprising: configuring a static route within at least one route table of the hub. ### Claim 4 (depends on 1) The computer-implemented method as recited in claim 1, further comprising: causing, using a static route, at least some network traffic to be directed to an appliance via the hub. ### Claim 5 (depends on 1) The computer-implemented method as recited in claim 1, further comprising: providing one or more metrics collected with respect to network traffic transmitted via the hub, including one or more of: (a) inbound traffic of a network associated with the hub, (b) outbound traffic of a network associated with the hub, or (c) dropped packets of a network associated with the hub. ### Claim 6 (depends on 1) The computer-implemented method as recited in claim 1, further comprising: transmitting, based at least in part on one or more entries of another route table associated with the hub, network packets via the hub between a third network and a fourth network, wherein the other route table does not include an entry enabling network packets originating at the third network to be transmitted via the hub to the first virtual network or the second virtual network. ### Claim 7 (depends on 1) The computer-implemented method as recited in claim 1, further comprising: receiving, at the hub, one or more packets from a premise external to the cloud via a virtual private network (VPN) connection; and transmitting, from the hub, the one or more packets to one or more destinations based on one or more entries of the route table. ### Claim 8 A system, comprising: one or more computing devices; wherein the one or more computing devices include instructions that upon execution on or across the one or more computing devices cause the one or more computing devices to: create, using one or more cloud resources, a hub for network connectivity between a plurality of networks including a first virtual network and a second virtual network; configure, in response to one or more programmatic requests, at least a portion of a route table to be used at the hub for traffic flowing between the first virtual network and the second virtual network; and transmit, via the hub in accordance with the route table, one or more network packets from the first virtual network to the second virtual network. ### Claim 9 (depends on 8) The system as recited in claim 8, wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices further cause the one or more computing devices to: in response to another programmatic request, propagate one or more entries to the route table. ### Claim 10 (depends on 8) The system as recited in claim 8, wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices further cause the one or more computing devices to: configure a static route within at least one route table of the hub. ### Claim 11 (depends on 8) The system as recited in claim 8, wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices further cause the one or more computing devices to: cause, using a static route, at least some network traffic to be directed to an appliance via the hub. ### Claim 12 (depends on 8) The system as recited in claim 8, wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices further cause the one or more computing devices to: provide one or more metrics collected with respect to network traffic transmitted via the hub, including one or more of: (a) inbound traffic of a network associated with the hub, (b) outbound traffic of a network associated with the hub, or (c) dropped packets of a network associated with the hub. ### Claim 13 (depends on 8) The system as recited in claim 8, wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices further cause the one or more computing devices to: transmit, based at least in part on one or more entries of another route table associated with the hub, network packets via the hub between a third network and a fourth network, wherein the other route table does not include an entry enabling network packets originating at the third network to be transmitted via the hub to the first virtual network or the second virtual network. ### Claim 14 (depends on 8) The system as recited in claim 8, wherein the one or more computing devices include further instructions that upon execution on or across the one or more computing devices further cause the one or more computing devices to: obtain a request, via a programmatic interface, to create the hub, wherein the hub is created in response to the request. ### Claim 15 One or more non-transitory computer-accessible storage media storing program instructions that when executed on or across one or more processors cause the one or more processors to: configure, using one or more cloud resources, a hub for network connectivity between a plurality of networks including at least a first virtual network and a second network; create, in response to one or more programmatic requests, a route table to be used at the hub for traffic flowing between the first virtual network and the second network; and transmit, via the hub in accordance with the route table, one or more network packets from the first virtual network to the second network. ### Claim 16 (depends on 15) The one or more non-transitory computer-accessible storage media as recited in claim 15, storing further program instructions that when executed on or across one or more processors further cause the one or more processors to: in response to another programmatic request, propagate one or more entries to the route table. ### Claim 17 (depends on 15) The one or more non-transitory computer-accessible storage media as recited in claim 15, storing further program instructions that when executed on or across one or more processors further cause the one or more processors to: configure a static route within at least one route table of the hub. ### Claim 18 (depends on 15) The one or more non-transitory computer-accessible storage media as recited in claim 15, storing further program instructions that when executed on or across one or more processors further cause the one or more processors to: cause at least some network traffic to be directed to an appliance via the hub. ### Claim 19 (depends on 15) The one or more non-transitory computer-accessible storage media as recited in claim 15, storing further program instructions that when executed on or across one or more processors further cause the one or more processors to: provide one or more metrics collected with respect to network traffic transmitted via the hub, including one or more of: (a) inbound traffic of a network associated with the hub, (b) outbound traffic of a network associated with the hub, or (c) dropped packets of a network associated with the hub. ### Claim 20 (depends on 15) The one or more non-transitory computer-accessible storage media as recited in claim 15, storing further program instructions that when executed on or across one or more processors further cause the one or more processors to: transmit one or more network packets via the hub between a third network and a fourth network, based at least in part on one or more entries of another route table associated with the hub, wherein the other route table does not include an entry enabling network packets originating at the third network to be transmitted via the hub to the first virtual network or the second virtual network.