IP Library › Granted Patent US 11,570,035
Granted Patent B2
US 11,570,035 · App. 17/484,917 · Granted Jan 31, 2023

Techniques for accessing logical networks via a virtualized gateway

Inventor: Ahmed Fuad Siddiqui (Everett, WA)
Assignee: AMAZON TECHNOLOGIES, INC.
H04L41/04H04L9/40H04L12/4633H04L12/4641H04L41/0896H04L41/5054H04L63/0272H04L63/08H04L63/10H04L67/02H04L67/08H04L67/10H04L67/1008H04L67/141H04L69/24H04L69/329
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,570,035
App. No.
17/484,917
Granted
Jan 31, 2023
Kind
B2
Abstract

Disclosed are various embodiments for receiving, via a network, a request from a client to establish a network tunnel over the network. A credential is received from the client in order to establish the network tunnel. The client is authenticated based upon the credential. The client negotiates, via the network, to establish the network tunnel.

Claims (44)

1. A method, comprising

receiving a request from a client device to connect to a logical network gateway hosted on a virtual machine, the logical network gateway controlling access to a logical network comprising a plurality of virtual machines;

establishing an encrypted connection between the logical network gateway and the client device, the encrypted connection providing the client device access to the logical network;

assigning a logical network address to the client device; and

in response to an assignment of the logical network address to the client device, allocating an additional computing resource to the virtual machine hosting the logical gateway.

2. The method of claim 1 , wherein the additional computing resource is a first computing resource and the method further comprises:

monitoring the virtual machine hosting the logical gateway to determine that usage of the first computing resource assigned to the logical network gateway has exceeded a threshold; and

allocating a second computing resource to the logical network gateway in response to determining that usage of the first computing resource assigned to the logical network gateway has exceeded the threshold.

3. The method of claim 2 , wherein the virtual machine hosting the logical gateway is a first virtual machine and at least one of the first computing resource or the second computing resource comprises a second virtual machine to supplement the first virtual machine.

4. The method of claim 1 , further comprising creating the logical network in response to receiving the request from the client device to connect to the logical network gateway.

5. The method of claim 4 , further comprising including the plurality of virtual machines in the logical network.

6. The method of claim 4 , wherein the logical network is created in response to receipt of a request from a client device to create the logical network.

7. The method of claim 1 , further comprising:

authenticating the client device; and

assigning the logical network address to the client device in response to authenticating the client device.

8. The method of claim 7 , wherein authenticating the client device further comprises:

receiving a credential from the client device;

sending the credential to an authentication service; and

receiving a response from the authentication service that indicates that the client device is authenticated.

9. The method of claim 1 , further comprising identifying a permission assigned to the client device.

10. The method of claim 9 , further comprising limiting access to a portion of the logical network based at least in part on the permission assigned to the client device.

11. A non-transitory, computer-readable medium comprising machine-readable instructions that, when executed by a processor of a computing device, cause the computing device to at least:

monitor usage of a first computing resource assigned to a logical network gateway for a logical network, the first computing resource facilitating the operation of a plurality of logical network tunnels maintained by the logical network gateway between the logical network and a plurality of respective clients; and

in response to a determination that usage of the first computing resource exceeds a threshold, allocate a second computing resource to the logical network gateway to augment the first computing resource.

12. The non-transitory, computer-readable medium of claim 11 , wherein the machine-readable instructions, when executed by the processor, further cause the computing device to at least:

receive a request from a client to connect to the logical network gateway; and

wherein the determination that the usage of the first computing resource exceeds the threshold occurs in response to receipt of the request from the client to connect to the logical network gateway.

13. The non-transitory, computer-readable medium of claim 12 , wherein the machine-readable instructions, when executed by the processor, further cause the computing device to at least establish a logical network tunnel between the client and the logical network in response to allocating the second computing resource.

14. The non-transitory, computer-readable medium of claim 13 , wherein the logical network tunnel is an encrypted connection.

15. The non-transitory, computer-readable medium of claim 13 , wherein the machine-readable instructions that cause the computing device to establish the logical network tunnel between the client and the logical network gateway further cause the computing device to at least assign a logical network address to the client.

16. The non-transitory, computer-readable medium of claim 12 , wherein the machine-readable instructions, when executed by the processor, further cause the computing device to at least:

authenticate the client in response to the request to connect to the logical network gateway; and

wherein the determination that the usage of the first computing resource exceeds the threshold further occurs in response to authenticating the client.

17. The non-transitory, computer-readable medium of claim 11 , wherein at least one of the first computing resource or the second computing resource comprises a virtual machine.

18. A system, comprising:

a computing device comprising a processor and a memory; and

machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:

create a logical network comprising a logical network gateway;

allocate a first computing resource to the logical network gateway;

receive a connection request to the logical network gateway from a client device;

determine that usage of the first computing resource exceeds a threshold; and

allocate a second computing resource to the logical network gateway to augment the first computing resource.

19. The system of claim 18 , wherein the machine-readable instructions, when executed by the processor, further cause the computing device to at least establish a connection between the logical network gateway and the client device in response to allocation of the second computing resource to the logical network gateway.

20. The system of claim 18 , wherein the connection request comprises authentication credentials for the client device and the method further comprises authenticating the client device by the computing device.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 13, 2021
From: SIDDIQUI, AHMED FUAD
To: AMAZON TECHNOLOGIES, INC.
Reel/Frame 057777/0068 →
Continuity (6)
Continuation 16692327 · Nov 22, 2019
Continuation 16179198 · Nov 2, 2018
Continuation 15912843 · Mar 6, 2018
Continuation 15426225 · Feb 7, 2017
Continuation 13683658 · Nov 21, 2012
Related Publication 20220014417A1 · Jan 13, 2022
Cited By (1)
US 12,395,396