Asynchronous Proxy for Network Traffic Tunneling

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing computing resources in service provider environments, particularly those using asynchronous or event-driven methods, face challenges in processing network packets due to the lack of direct network addressability, which hinders network communication and analysis tasks such as troubleshooting, security monitoring, and performance monitoring.

Innovation Solution

The implementation of asynchronous proxy functions within a service provider environment that can tunnel and process network traffic, allowing for packet inspection, blocking, duplication, and forwarding, even for resources without a network address, by acting as an intermediary between clients and destination functions within the environment.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If asynchronous or event-driven computing resources are used in service provider environments, then cost reduction and scalability are improved, but network addressability and direct network communication capability deteriorate

Engineering Contradiction:
ImprovescalabilityVSAvoidnetwork addressability
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent introduces a network proxy as an intermediary component that bridges the gap between networked clients and asynchronous computing resources. The proxy receives network communications, extracts parameters including network packets, and forwards them to the appropriate asynchronous resource. This mediator enables network addressability for resources that inherently lack it, resolving the contradiction between scalability and network communication capability.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If asynchronous functions execute for just milliseconds and are not directly network addressable, then execution speed and resource efficiency are improved, but network communication ease and troubleshooting capability worsen

Engineering Contradiction:
Improveexecution speedVSAvoidtroubleshooting capability
Core Design Contradiction:
ProductivityVSDifficulty of detecting and measuring

Solution Approach 1:

The network proxy implements feedback mechanisms by capturing and analyzing network packets exchanged with asynchronous resources. It can inspect packet contents, monitor communication patterns, and provide visibility into the brief millisecond-execution interactions. This feedback loop enables troubleshooting and monitoring capabilities without interfering with the fast execution of asynchronous functions.

Inventive Principle:
Principle #23Feedback

3Ease of operation

If a network proxy is introduced to enable network communication with asynchronous resources, then network addressability and monitoring capability are improved, but system complexity increases

Engineering Contradiction:
Improvenetwork addressabilityVSAvoidsystem complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The network proxy is designed as a multi-functional component that consolidates multiple operations: receiving network communications, extracting parameters, identifying target asynchronous resources, forwarding packets, and enabling monitoring. By combining these functions into a single universal proxy, the patent reduces overall system complexity compared to implementing separate mechanisms for each function.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10547590B1Network processing using asynchronous functions
Publication Date: 2020.01.28 AMAZON TECH INC
  • US10547590B1 patent drawing
  • US10547590B1 patent drawing
  • US10547590B1 patent drawing

AI summary

A technology is provided for proxying network traffic. A computer system activates a proxy function in response to a network communication identified in a compute service of a service provider environment. The system receives parameters from the network communication originating from a client at the proxy function and the parameters identify a destination function and a network packet. The proxy function is applied to the network packet. The system launches the destination function with the network packet and parameters from the proxy function, wherein the destination function is configured to launch on a computing instance of the compute service.