Abstract: Disclosed are various embodiments for managing radio-based private networks. In one embodiment, a cellular network comprises at least one cell that provides a radio-based private network coverage of a site of an organization. The system further comprises at least one computing device in a cloud provider network that implements one or more network functions for an associated core network of the radio-based private network.

Abstract: Techniques for utilizing dual-stack network addressing for compute instances hosted in an edge location of a cloud provider network along with communications service provider (CSP) network addresses are described. A first network address is assigned to the compute instance from a pool of network addresses of the cloud provider network, and a second network address is associated with the compute instance that is provided by the CSP network. A gateway of the edge location is updated to direct packets addressed to the second network address to the compute instance via use of the first network address.

Abstract: Techniques are described for enabling a service provider to determine the power utilization of electrical lineups powering physical servers in a data center and place virtual machine instances into the physical servers based on the power utilization and a user-specified preference of a virtual machine instance type. In one embodiment, a computer-implemented method includes determining a power utilization for each lineup of a plurality of lineups that comprise a plurality of racks of physical servers, selecting a lineup of the plurality of lineups for the virtual machine instance based on the power utilizations for the plurality of lineups, selecting a virtual machine slot for the virtual machine instance from a plurality of candidate virtual machine slots of the physical servers of the lineup based on the user-specified preference, and causing the virtual machine slot of a physical server of the lineup to execute the virtual machine instance.

Abstract: Techniques are described for enabling users of a cloud provider network to define and use custom “virtual regions” comprised of selected sets of cloud provider network infrastructure locations. A cloud provider network enables users to obtain information about available infrastructure locations and to identify locations that satisfy a set of performance characteristics and other parameters. Once a set of desirable infrastructure locations have been identified, users can request the creation of a virtual region to be associated with their user account, where the request specifies a set of infrastructure locations to comprise the virtual region. Once a virtual region is created, users can cause computing resources to be launched into or otherwise associated with the virtual region in a manner similar to the use of existing regions and availability zones.

Abstract: Disclosed are various embodiments for interfaces for creating radio-based private networks. In one embodiment, a request is received via an interface to create a radio-based private network for a customer. The request indicates a quantity of wireless devices that will connect to the radio-based private network. A quantity of radio units to serve the radio-based private network is determined based at least in part on the quantity of wireless devices. The radio units are preconfigured to implement a radio access network for the radio-based private network. A shipment is initiated to the customer of the radio units that have been preconfigured. Resources in a cloud provider network are provisioned to function as a core network for the radio-based private network.

Abstract: A representation of a category of task offloaders is stored, in response to receiving a descriptor of the category, in a database of categories of offloaders which can be attached to servers of one or more classes. An indication of server configurations which include a task offloader of the category is provided via programmatic interfaces. A task is executed at a task offloader of a server with one of the server configurations.

Abstract: Disclosed are various embodiments for scheduling use of heterogeneous frequency schemes for radio-based networks. In one embodiment, a plurality of frequency schemes that are available to be used in a geographic area by a radio-based network are determined. It is determined whether respective quality-of-service requirements associated with a plurality of wireless devices used in the geographic area, or applications executed in those devices, are capable of being met by individual ones of the plurality of frequency schemes. A schedule is generated for use of one or more of the plurality of frequency schemes in the geographic area by the radio-based network based at least in part on whether the respective quality-of-service requirements are capable of being met by the individual ones of the plurality of frequency schemes.

Abstract: Disclosed are various embodiments that provide distributed user plane functions for radio-based networks. In one embodiment, data is received from a client device connected to a radio access network of a radio-based network. The data is forwarded to a user plane component of a user plane function. The user plane component is implemented in a computing device of the radio access network. The data is processed by the user plane component. The data that has been processed is then routed to a data network.

Abstract: Disclosed are various embodiments for a system that hardware locks a virtual machine to a host machine. The host machine can include a processor and a memory. A hypervisor can be stored in the memory that, when executed by the processor, causes the computing device to host one or more virtual machines. In addition, machine readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least: receive a request to perform an operation on a virtual machine hosted by the hypervisor; evaluate the request to determine that the request complies with a policy; and in response to a determination that the request complies with the policy, cause the hypervisor to initiate the operation.

Abstract: A host computer inventory system within a provider network detects patterns of launch requests on an individual user account basis. For a customer that cyclically submits similar launch requests, the inventory system may allocate slots in specific host computers consistent with the detected launch pattern so that future attempts to launch the virtual machines will be honored using the pre-allocated hosts.

Abstract: A first virtualization control mode to be used for configuring one or more compute instances is determined. Based at least partly on the mode, preparatory configuration operations for launching a compute instance are initiated. The operations include transferring at least a portion of a machine image to a storage device accessible from a host, and initialization of a virtual network interface. A compute instance is instantiated using the machine image at the host. The compute instance is a thread of an intermediary process launched by an administrative agent at the host in response to a launch request.

Abstract: Security can be provided for data stored using resources that are deployed in an environment managed by a third party. Physical and logical detection mechanisms can be used to monitor various security aspects, and the resulting security data can be used to identify potential threats to these resources. In some embodiments, suspicious activity can cause resources such as data servers to be automatically and remotely rebooted such that keys stored in volatile memory on those data servers will be lost from those servers, such that an attacker will be unable to decrypt data stored on those servers. Once a determination of safety is made, the keys can be provided to the respective data servers such that data operations can resume.

Abstract: A component of a computing service obtains respective indications of placement policies that contain host selection rules for application execution environments such as guest virtual machines. With respect to a request for a particular application execution environment, a group of applicable placement policies is identified. A candidate pool of hosts is selected using the group of placement policies, and members of the pool are ranked to identify a particular host on which the requested application execution environment is instantiated.

Abstract: Techniques are described for a cloud provider to provide a managed experience related to the use of virtual networks and subnets to logically group user computing resources deployed at provider substrate extensions. A cloud provider enables users to create virtual network templates used when deploying computing resources at provider substrate extensions, where such virtual network templates may include various networking, security, and other configurations to be applied to network traffic and other activity of resources deployed within an associated virtual network. Once a virtual network template is defined, a user can use the template as the basis to launch resources into the virtual network and, by extension, into provider substrate extensions associated with the virtual network. Upon receiving such a request, the provider network can manage the creation and configuration of underlying subnets, route tables, and other resource, as needed, at each of the relevant provider substrate extensions.

Abstract: Techniques are described for enabling users of a service provider network to create and configure “application profiles” that include parameters related to execution of user workloads at provider substrate extensions. Once an application profile is created, users can request the deployment of user workloads to provider substrate extensions by requesting instance launches based on a defined application profile. The service provider network can then automate the launch and placement of the user's workload at one or more provider substrate extensions using edge-optimized compute instances (e.g., compute instances tailored for execution within provider substrate extension environments).

Abstract: Techniques for capacity management in provider networks using dynamic host device instance type reconfigurations are described. A fleet reconfiguration service performs runtime reconfiguration of slots of host electronic devices that are available to execute compute instances, while the electronic devices may execute other compute instances, to dynamically change the type and/or numbers of slots of the electronic devices available for compute instance execution.

Abstract: Disclosed are various embodiments for extending cloud-based virtual private networks to radio-based networks. In one embodiment, a request from a client device to connect to a radio-based network is received. A virtual private cloud network of a cloud provider network to which the client device is permitted access is determined. The client device is provided with access to the virtual private cloud network through the radio-based network.

Abstract: Disclosed are various embodiments that provide customizable data-processing network functions for radio-based networks. In one embodiment, a data-processing network function is operated in a radio-based network for a customer. Input data is received from the customer to configure the data-processing network function to perform a customized function for the radio-based network. The data-processing network function is configured, in response to the input data, to perform the customized function when executed in the radio-based network.

Abstract: Techniques for automated failover of remote control planes are described. A method of automated failover of remote control planes include determining failover event associated with a first control plane has occurred, the first control plane associated with a first area of a provider network, identifying a second control plane associated with a second area of the provider network, and failing over the first area of the provider network from the first control plane to the second control plane, wherein the child area updates one or more references to endpoints of the first control plane to be references to endpoints of the second control plane.

Abstract: Techniques for managing latency of communications between compute instances and mobile devices are described. A message including an indication of a mobility event associated with a mobile device of a communications service provider network is received. The mobility event indicates a change in a connection point of the mobile device to the communications service provider network from a from a first access point to a second access point. A communications delay of at least a portion of a network path between the mobile device and a compute instance via the second access point is determined to not satisfy a latency constraint. A second provider substrate extension of the cloud provider network that satisfies the latency constraint for communications with the mobile device via the second access point is identified, and a message is sent to the second provider substrate extension to cause the launch of another compute instance.