US 11,457,080 B1Granted

Service mesh management

AssigneeAmazon Technologies, Inc.

InventorsKiran Kumar Meduri, David Stephen Bell, Scott Howard La Vigne, Shubha Shree Bheemarao, Ivan Vitjuk, Karan Kumar Vasnani, James Joseph Straub, Yathish Sudhakara Gangolli

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A system, method, and computer readable medium for managing service mesh for container instances. The method includes generating a service mesh that includes a plurality of computing resources. The method further includes obtaining, from an instantiated computing resource, a request to associate the computing resource with another computing resource in the service mesh, where the request comprising a set of constraints that allows the other computing resource to be identified. Based on the set of constraints, the computing resources in the service mesh are connected in which the computing resources communicate with each other through a dedicated proxy.

Claims20

Dependent claims

A system, comprising:

a service mesh, the service mesh comprising a plurality of nodes, an individual node of the plurality of nodes including a resource component and a proxy component to transmit a set of constraints associated with connections permitted to be established with other nodes of the service mesh via a port and network address of respective proxy components of the plurality of nodes as indicated b the set of constraints;
and
a control plane that:
obtains the set of constraints transmitted by the proxy component, the set of constraints indicating a network configuration for network communication associated with the individual node establishes connections among the plurality of nodes associated with the service mesh in accordance with the sets of constraints provided by the individual node, the connections being restricted to occur, between proxy components associated with the plurality of nodes, in accordance with the set of constraints;
and
obtains, from one or more of the proxy components associated with the plurality of nodes, network traffic data generated by the plurality of nodes.

3 more elements

A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:

establish a connection with a first computing resource of a plurality of computing resources in a service mesh via an address of a proxy of the first computing resource as indicated by a set of one or more constraints;
obtain, from the proxy of the first computing resource, a request to permit the first computing resource to communicate with a second computing resource of the plurality of computing resources, the request indicating communication to be restricted to the first computing resource and second computing resource;
cause the proxy of the first computing resource to communicate with a proxy of the second computing resource;
in response to processing the request, update proxy configuration data associated with the plurality of computing resources of the service mesh, wherein proxy configuration data associated with the first computing resource is different from proxy configuration data of other computing resources of the plurality of computing resources;
and
distribute the proxy configuration data to the plurality of computing resources.

3 more elements

Dependencies are inferred from the claim text.