Private alias endpoints for isolated virtual networks

• Main Authors: MILLER KEVIN CHRISTOPHER, OWEIS MARWAN SALAH EL-DIN, SHEEHAN RICHARD ALEXANDER, LAURENCE DOUGLAS STEWART, DICKINSON ANDREW BRUCE
• Format: Patent
• Language: Chinese; English
• Published: 22.06.2021
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRIC DIGITAL DATA PROCESSING; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

The invention relates to private alias endpoints for isolated virtual networks. In accordance with a designation of a private alias endpoint as a routing target for traffic directed to a service from within an isolated virtual network of a provider network, a tunneling intermediary receives a baseline packet generated at a compute instance. The baseline packet indicates a public IP (Internet Protocol) address of the service as the destination, and a private IP address of the compute instance as the source. In accordance with a tunneling protocol, the tunneling intermediary generates an encapsulation packet comprising at least a portion of the baseline packet and a header indicating the isolated virtual network. The encapsulation packet is transmitted to a node of the service. 本公开涉及用于隔离虚拟网络的私有别名端点。根据私有别名端点作为从提供商网络的隔离虚拟网络内导向到服务的流量的路由目标的指定，隧道中介接收在计算实例处生成的基线数据包。所述基线数据包指示所述服务的公共IP(互联网协议)地址作为目的地，并且指示所述计算实例的私有IP地址作为源。根据隧道协议，所述隧道中介生成包括所述基线数据包的至少一部分和指示所述隔离虚拟网络的报头的封装数据包。所述封装数据包被传送到所述服务的节点。