Andrew P Dickinson

US Patent:

8645508, Feb 4, 2014

Filed:

Mar 3, 2010

Appl. No.:

12/717001

Inventors:

Andrew B. Dickinson - Seattle WA, US
Daniel T. Cohn - Seattle WA, US

Assignee:

Amazon Technologies, Inc. - Reno NV

International Classification:

G06F 15/173

US Classification:

709220, 709223, 709244

Abstract:

Techniques are described for providing managed computer networks. In some situations, the techniques include managing communications for computing nodes of a managed computer network by using a pool of multiple alternative intermediate destinations to forward at least some communications to other final destinations. For example, a manager module associated with a source computing node may select a particular one of multiple alternative intermediate destinations to use for one or more particular communications from the source computing node to an indicated final destination, such as based on network addresses associated with the source computing node and/or the final destination. The multiple alternative intermediate destinations may have various forms, including multiple alternative edge devices at a first location at which various computing nodes are co-located that operate to manage communications between those co-located computing nodes at the first location and other external computer systems at one or more other locations.

US Patent:

20120233329, Sep 13, 2012

Filed:

Mar 9, 2011

Appl. No.:

13/044494

Inventors:

Andrew B. Dickinson - Seattle WA, US
Eric Jason Brandwine - Haymarket VA, US

Assignee:

Amazon Technologies, Inc. - Reno NV

International Classification:

G06F 15/173

US Classification:

709226

Abstract:

Global remappable addresses can be announced from multiple points across the Internet or other public networks. A global address can be mapped to one or more internal addresses for a provider, such that when traffic is received to a given network location the provider can determine whether the traffic is to be processed in the current network location or a different network location, as may be determined using a static process or a dynamic process based on any of a number of factors. If the traffic is destined for a different network location, the traffic can be remapped and forwarded to that network location over a public or private network. Once the traffic is in the determined destination network location, the traffic can be remapped and delivered to the ultimate destination. The remappings and destination network locations can be adjusted at any time, based on any of a number of factors, without significant risk of dropping traffic.

US Patent:

20130263256, Oct 3, 2013

Filed:

Dec 29, 2010

Appl. No.:

12/981198

Inventors:

Andrew B. Dickinson - Seattle WA, US
Eric Jason Brandwine - Haymarket VA, US

International Classification:

G06F 21/00

US Classification:

726 22

Abstract:

Systems and methods protect against denial of service attacks. Remotely originated network traffic addressed to one or more network destinations is routed through one or more locations. One or more of the locations may be geographically proximate to a source of a denial of service attack. One or more denial of service attack mitigation strategies is applied to portions of the network traffic received at the one or more locations. Network traffic not blocked pursuant to the one or more denial of service attack mitigation strategies is dispatched to its intended recipient. Dispatching the unblocked network traffic to its intended recipient may include the use of one or more private channels and/or one or more additional denial of service attack mitigation strategies.

US Patent:

20140082164, Mar 20, 2014

Filed:

Sep 18, 2012

Appl. No.:

13/621891

Inventors:

Amazon Technologies, Inc. - , US
Andrew B. Dickinson - Seattle WA, US
Bradley D. Roberts - Bellevue WA, US
Eric P. Wei - Seattle WA, US
Colin J. Whittaker - Dublin, IE

Assignee:

AMAZON TECHNOLOGIES, INC. - Reno NV

International Classification:

H04L 29/12

US Classification:

709221

Abstract:

Disclosed are various embodiments for dynamically allocating network addresses to devices based on demand. A first network address allocation is initially assigned to a subdivision of a network including multiple computing devices. A router for the subdivision is configured to implement the first network address allocation. Data indicating a reconfiguration of the computing devices is obtained. A second network address allocation is subsequently assigned to the subdivision of the network based at least in part on the reconfiguration of the computing devices. The router for the subdivision is reconfigured to implement the second network address allocation.

US Patent:

7882046, Feb 1, 2011

Filed:

Mar 30, 2007

Appl. No.:

11/694699

Inventors:

Karen R. Haberkorn - Seattle WA, US
Llewllyn J. Mason - Seattle WA, US
Brian J. Schuster - Seattle WA, US
Richard J. Cole - Seattle WA, US
Mike Perkowitz - Seattle WA, US
Mark Jacobson - Seattle WA, US
Andrew B. Dickinson - Seattle WA, US

Assignee:

Amazon Technologies, Inc. - Reno NV

International Classification:

G06F 15/18

US Classification:

706 12

Abstract:

An ad system is described for providing ad selections in response to an ad presentation opportunity. The ad system can use multiple content providers to generate multiple sets of ad candidates. The content providers can apply different ad selection paradigms in generating their sets of ad candidates. The paradigms may act on different aspects of a context pertaining to the ad presentation opportunity. A chooser module and filtering module can cull the set of ad selections from among the plural sets of ad candidates. At least one content provider uses machine learning functionality in generating ad candidates, such as a Naïve Bayesian approach, an affiliate similarity approach, etc. Various content providers also find application in a stand-alone mode.

US Patent:

20210160218, May 27, 2021

Filed:

Jan 8, 2021

Appl. No.:

17/145130

Inventors:

- Seattle WA, US
Andrew Bruce Dickinson - Seattle WA, US
Christopher Ian Hendrie - Centreville VA, US

Assignee:

Amazon Technologies, Inc. - Seattle WA

International Classification:

H04L 29/06
H04L 29/08
H04L 29/12

Abstract:

Methods and apparatus for private network peering in virtual network environments in which peerings between virtual client private networks on a provider network may be established by clients via an API to a peering service. The peering service and API may allow clients to dynamically establish and manage virtual network transit centers on the provider network at which virtual ports may be established and configured, virtual peerings between private networks may be requested and, if accepted, established, and routing information for the peerings may be specified and exchanged. Once a virtual peering between client private networks is established, packets may be exchanged between the respective client private networks via the peering over the network substrate according to the overlay network technology used by the provider network, for example an encapsulation protocol technology.

US Patent:

20210152392, May 20, 2021

Filed:

Nov 19, 2020

Appl. No.:

16/953191

Inventors:

- Seattle WA, US
Richard Alexander Sheehan - Dublin, IE
Douglas Stewart Laurence - Mercer Island WA, US
Marwan Salah El-Din Oweis - Olney MD, US
Andrew Bruce Dickinson - Seattle WA, US

Assignee:

Amazon Technologies, Inc. - Seattle WA

International Classification:

H04L 12/46
G06F 9/455

Abstract:

In accordance with a designation of a private alias endpoint as a routing target for traffic directed to a service from within an isolated virtual network of a provider network, a tunneling intermediary receives a baseline packet generated at a compute instance. The baseline packet indicates a public IP (Internet Protocol) address of the service as the destination, and a private IP address of the compute instance as the source. In accordance with a tunneling protocol, the tunneling intermediary generates an encapsulation packet comprising at least a portion of the baseline packet and a header indicating the isolated virtual network. The encapsulation packet is transmitted to a node of the service.

US Patent:

20210135991, May 6, 2021

Filed:

Nov 9, 2020

Appl. No.:

17/093315

Inventors:

- Seattle WA, US
Andrew Bruce Dickinson - Seattle WA, US

Assignee:

Amazon Technologies, Inc. - Seattle WA

International Classification:

H04L 12/745
H04L 12/741
H04L 12/725
H04L 12/46
H04L 12/713
H04L 12/931
H04L 12/721

Abstract:

Route tables may be associated with ingress traffic for logically isolated networks. A routing device at the edge of a logically isolated network may receive a route to include in a route table that is associated with ingress traffic to the logically isolated network to forward the ingress traffic to a network appliance hosted in the logically isolated network. Network packets received at the edge routing device may have a destination of a computing resource hosted in the logically isolated network. The edge routing device may identify the route in the route table to override the destination in the network packet with the network appliance and forward the network packet to the network appliance according to the route.