Serverless network interface
Systems and methods are described for creating a serverless network interface for serverless functionalities. The present disclosure provides for creation of user-defined serverless network interfaces that facilitate creation, modification, and re-use of network configurations across one or more serverless functionalities via network interfaces associated with each function.
1 . A system for managing network interfaces for serverless applications, the system comprising:
a first set of computing devices implementing a virtual network service configured to provide virtual networking functionality using a substrate physical network;
a data store storing definitions of serverless network interfaces (SNI) comprising fields for a network connection type, firewall rules for ingress and egress traffic, and DNS configuration; and
a second set of computing devices implementing a serverless computing service configured to:
obtain information specifying one or more of the fields as configuration for a SNI for a serverless application;
instantiate the SNI at least partly by configuring the virtual network service to route data according to the configuration of the SNI;
store an association between the SNI and the serverless application in the data store;
for each invocation of the serverless application:
allocate computing resources of the serverless computing service to generate an instance of the serverless application;
configure a network interface of the instance to attach to the SNI, thereby causing the network interface to route data to the virtual network service according to the configuration of the SNI; and
initiate an execution of user-defined code representing the serverless application in an execution environment corresponding to the instance,
wherein at least two instances providing the serverless application are concurrently attached to the SNI; and
route network traffic for the serverless application via the attached SNI according to the configuration.
2 . The system of claim 1 , wherein the virtual network service enables discovery of serverless instances associated with the serverless network interface, wherein to enable discovery of serverless instances associated with the serverless network interface, the virtual network service is configured to:
obtain a request from the serverless function for membership of a serverless network interface; and
return network address information for serverless instances associated with the serverless network interface.
3 . The system of claim 1 , wherein the system is further configured to deallocate resources associated with the serverless network interface in response to determining that no serverless instances are associated with the serverless network interface.
4 . The system of claim 1 , wherein one or more configurations of a network connectivity interface of the serverless function are permissions to be applied to network communications traversing the serverless network interface.
5 . A method comprising:
obtaining information associating a serverless functionality with a serverless network interface;
creating the serverless network interface based on the information, wherein creation of the serverless network interface includes configuring a virtual network service to route data according to the configuration of the serverless network interface;
obtaining invocations of the serverless functionality; and
in response to each invocation of the serverless functionality, attaching the serverless network interface to a serverless instance associated with the invocation and providing the serverless functionality at least partly by initializing a network interface, associated with the serverless instance associated with the invocation and providing the serverless functionality, to communicate with the virtual network service,
wherein at least two serverless instances providing the serverless functionality are concurrently attached to the serverless network interface.
6 . The method of claim 5 , wherein a network corresponding to the serverless network interface is a mesh network between instances of the serverless functionality.
7 . The method of claim 5 , wherein configuring the virtual network service to implement routing associated with the serverless network interface includes configuring the virtual network service to route between the at least two serverless instances attached to the serverless network interface and an external network.
8 . The method of claim 5 , wherein configuring the virtual network service to implement routing associated with the serverless network interface includes configuring the virtual network service to route between the at least two serverless instances attached to the serverless network interface and a virtual private cloud.
9 . The method of claim 5 , wherein the virtual network service enables discovery of the at least two serverless instances associated with the serverless network interface, wherein to enable discovery of a second function, the virtual network service is configured to:
obtain a request from the serverless functionality for membership of the serverless network interface; and
return network address information for the at least two serverless instances associated with the serverless network interface.
10 . The method of claim 5 , wherein the serverless functionality is one of a serverless function, a serverless database, or a serverless search system.
11 . The method of claim 5 , further comprising deallocating resources associated with the serverless network interface in response to determining that no serverless instances are associated with the serverless network interface.
12 . The method of claim 5 , wherein the information specifies one or more configurations of a network connectivity interface of the serverless functionality comprising permissions to be applied to network communications traversing the serverless network interface.
13 . One or more non-transitory computer-readable media comprising computer-executable instructions that, when executed, by a cloud provider system causes the cloud provider system to:
obtain information associating a serverless functionality with a serverless network interface;
create the serverless network interface based on the information, wherein creation of the serverless network interface includes configuring a virtual network service to route data according to the configuration of the serverless network interface;
obtain invocations of the serverless functionality; and
in response to each invocation of the serverless functionality, attach the serverless network interface to a serverless instance associated with the invocation and providing the serverless functionality at least partly by initializing a network interface, associated with the serverless instance associated with the invocation and providing the serverless functionality, to communicate with the virtual network service,
wherein at least two serverless instances providing the serverless functionality are concurrently attached to the serverless network interface.
14 . The one or more non-transitory computer-readable media of claim 13 , wherein a network corresponding to the serverless network interface is a mesh network between instances of the serverless functionality.
15 . The one or more non-transitory computer-readable media of claim 13 , wherein configuring the virtual network service to implement routing associated with the serverless network interface includes configuring the virtual network service to route between the at least two serverless instances attached to the serverless network interface and an external network.
16 . The one or more non-transitory computer-readable media of claim 13 , wherein configuring the virtual network service to implement routing associated with the serverless network interface includes configuring the virtual network service to route between serverless instances attached to the serverless network interface and a virtual private cloud.
17 . The one or more non-transitory computer-readable media of claim 13 , wherein the virtual network service enables discovery of the at least two serverless instances associated with the serverless network interface, wherein to enable discovery of a second function, the virtual network service is configured to:
obtain a request from the serverless functionality for membership of the serverless network interface; and
return network address information for the at least two serverless instances associated with the serverless network interface.
18 . The one or more non-transitory computer-readable media of claim 13 , wherein the serverless functionality is one of a serverless function, a serverless database, or a serverless search system.
19 . The one or more non-transitory computer-readable media of claim 13 , wherein the computer-executable instructions, when executed by the cloud provider system, further cause the cloud provider system to deallocate resources associated with the serverless network interface in response to determining that no serverless instances are associated with the serverless network interface.
20 . The one or more non-transitory computer-readable media of claim 13 , wherein the information specifies one or more configurations of a network connectivity interface the serverless functionality comprising permissions to be applied to network communications traversing the serverless network interface.