US 11,909,719 B1Granted

Managing the allocations and assignments of internet protocol (IP) addresses for computing resource networks

AssigneeAmazon Technologies, Inc.

InventorsJonathan Paul Kramer, Michael Erik Untereiner, Samuel Lough, John Jeffrey Schlachtenhaufen, Masood Karimi, Eric Andrew Rubin-Smith, Joshua D Leaverton, Shovan Kumar Das

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

Techniques and technologies for an Internet Protocol (IP) address management (IPAM) system to track and manage IP address workflows in a network. The IPAM system can be used to define and enforce management policies or rules regarding IP address management, such as allocation policies, refill policies, and so forth. For instance, the IPAM system can enforce allocation policies that define rules to allow or deny allocation of IP addresses based on types of resources for which the IP addresses are requested, registered user accounts that are requesting the IP addresses, the purpose of the resources receiving the IP addresses, and so forth. Additionally, the IPAM system can enforce refill policies that define rules for replenishing inventories of IP addresses that have been allocated for different domains in the network. The IPAM system can improve the management of IP address workflows by enforcing policy and tracking IP address workflows in networks.

Claims18

Dependent claims

A method for an Internet Protocol (IP) address manager to manage allocation of a plurality of IP addresses to resources in a first virtual network and a second virtual network of a cloud provider network, the method comprising:

receiving, from an administrator account registered with the cloud provider network, a management request for the IP address manager to manage the plurality of IP addresses that are allocated for use in the first virtual network and the second virtual network, the first virtual network and second virtual network being registered with the administrator account;
assigning first IP addresses, of the plurality of IP addresses, to a first address group that is assigned to the first virtual network, the first virtual network being disposed in a first geographic region of the cloud provider network;
assigning second IP addresses, of the plurality of IP addresses, to a second address group that is assigned to the second virtual network, the second virtual network being disposed in a second geographic region of the cloud provider network;
receiving, from the administrator account, input defining (i) a first allocation policy that defines first allocation rules for allocating the first IP addresses and (ii) a group of user accounts that are permitted to allocate the first IP addresses to computing resources located in the first virtual network;
attaching the first allocation policy to the first address group;
attaching a second allocation policy to second address group, the second allocation policy defining second allocation rules for allocating the second IP addresses in the second virtual network;
receiving, from a user account, an allocation request for allocation of one or more IP addresses of the first IP addresses in the first address group for use by one or more resources deployed in the first virtual resource network;
determining that a resource type of the one or more resources has a purpose that is permitted under the first allocation rules for use of the first IP addresses;
determining that the user account is included in the group of user accounts that are permitted to allocate the first IP addresses to the computing resources located in the first virtual network according to the first allocation policy;
determining, based at least in part on the user account being permitted to allocate the first IP addresses to the computing resources located in the first virtual network, that the allocation of the one or more IP addresses from the first address group is permitted by the first allocation policy;
and
allocating the one or more IP addresses to the one or more resources located in the first virtual network.

9 more elements

A system comprising:

one or more processors;
and
one or more computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
monitoring usage of a set of Internet Protocol (IP) addresses that are designated for use by a network of resources provided by a service provider network, the set of IP addresses being organized into at least a first address group of first IP addresses and a second address group of second IP addresses;
receiving an allocation policy for the first address group that dictates allocation of the first IP addresses for use by the resources;
attaching a refill policy to the first address group, the refill policy defining refill rules for adding IP addresses to the first address group;
receiving, from a user account associated with the network, a request for one or more resources in the network to be allocated a plurality of IP addresses from the first IP addresses in the first address group;
determining whether the allocation policy permits the allocation of the plurality of IP addresses to the one or more resources;
determining that the refill policy indicates that additional available IP addresses are to be added from a third address group;
and
in response to determining that the allocation policy permits the allocation:
allocating the plurality of IP addresses to the one or more resources;
and
adding the additional available IP addresses to the first address group and from the third address group.

11 more elements

A method comprising:

monitoring allocations of a set of Internet Protocol (IP) addresses that are designated for use by a network of resources provided by a service provider network, the set of IP addresses being organized into at least a first address group of first IP addresses and a second address group of second IP addresses;
receiving a refill policy for the first address group that defines a refill rule for replenishing the first address group with additional IP addresses;
allocating an IP address from the first address group to a resource in the network;
determining that a number of available IP addresses in the first address group is less than or equal to a threshold number defined by the refill rule, the threshold number being greater than zero available IP addresses;
determining that the refill policy indicates that additional IP addresses are to be added to the first address group from a third address group,
identifying a second refill policy, associated with the third address group, that defines a maximum number of available IP addresses that are permitted to be taken from the third address group;
determining that a number of the additional IP addresses that are to be added to the first address group is less than the maximum number;
identifying a previous allocation of additional IP addresses from the third address group and to the first address group;
determining, using at least the previous allocation, a frequency at which the first address group requests allocations from the third address group;
determining that the frequency is less than or equal to a permissible frequency;
and
adding the additional IP addresses to the first address group based at least in part on the number of the additional IP addresses being less than the maximum number.

9 more elements

Dependencies are inferred from the claim text.