Abstract: At a managed control plane service, constituent services and operational requirements of an application are identified. In response to an end-user request directed to the application, contents of an inter-service request are generated at a resource selected by the managed control plane service for a first constituent service, and a response to the message is generated at another resource selected for a second constituent service. Tasks to be performed for the operational requirements are initiated by the managed control plane service.

Abstract: Disclosed are various embodiments for on-demand application-driven network slicing. In one embodiment, first data is transmitted to or from a first application in a particular computing device using a first network slice in a communications network. A request is sent from the particular computing device to configure a second network slice in the communications network based at least in part on a requirement of a second application. Second data is transmitted to or from the second application using the second network slice.

Abstract: At a radio-based application pipeline processing server at which a portion of a distributed unit (DU) of a radio-based application is implemented, a particular networking hardware device is selected from among several devices (which include least one device incorporated within a network function accelerator card and at least one device which is not part of an accelerator card) for transmission of at least a portion of mid-haul traffic to a centralized unit (CU). The mid-haul traffic is transmitted to the CU via the selected device. At least a portion of front-haul traffic is transmitted to a radio unit (RU) via a networking hardware device incorporated within a network function accelerator card of the server.

Abstract: Techniques for managing latency of communications between compute instances and mobile devices are described. A message including an indication of a mobility event associated with a mobile device of a communications service provider network is received. The mobility event indicates a change in a connection point of the mobile device to the communications service provider network from a from a first access point to a second access point. A communications delay of at least a portion of a network path between the mobile device and a compute instance via the second access point is determined to not satisfy a latency constraint. A second provider substrate extension of the cloud provider network that satisfies the latency constraint for communications with the mobile device via the second access point is identified, and a message is sent to the second provider substrate extension to cause the launch of another compute instance.

Abstract: Disclosed are various embodiments for resource allocation policies for a hosted computing environment that can be configured by organizations that use the hosted computing environment under a utility computing model. In one embodiment, a resource allocation request to allocate a computing resource within a hosted computing environment is received. The resource allocation request is associated with an account of an organization. It is determined that a fulfillment of the resource allocation request would violate a resource allocation policy configured by the organization within the hosted computing environment. The resource allocation request is prevented from being automatically fulfilled in response to determining that the fulfillment of the resource allocation request would violate the resource allocation policy.

Abstract: Disclosed are various embodiments for extending cloud-based virtual private networks to radio-based networks. In one embodiment, a subnet of a virtual private cloud network of a cloud provider network is created in a radio-based network. An identifier of a subscriber identity module of a client device is registered in the virtual private cloud network. The subscriber identity module is assigned to a security group of the virtual private cloud network. A request from the client device to connect to the radio-based network is received, and the request presents the identifier. The virtual private cloud network to which the client device is permitted access is determined. The client device is provided with access to a resource on the virtual private cloud network through the radio-based network.

Abstract: In a cloud computing system, groups of virtual machines include within one or more pods interacting with one another. A set of hosts is dedicated to operation of the virtual machines in each pod, and such dedication persists during routine maintenance operations when one or more virtual machines is uninstalled. The pod and the hosts can be scheduled for maintenance during a single interval. The cloud computing system may notify the owner of the virtual machines in advance of the interval, and may allow the owner of the virtual machines to either reschedule the maintenance of the pod and hosts in a single interval, or to schedule maintenance for each virtual machine in a separate interval.

Abstract: Disclosed are various embodiments that provide demand-based allocation of ephemeral radio-based network resources. In one embodiment, a determination is made that an unmanned vehicle has unallocated computing capacity along a travel path. At least a portion of the unallocated computing capacity is provisioned for use by a customer for a time period as the unmanned vehicle progresses on the travel path.

Abstract: Disclosed are various embodiments for managing computing capacity in radio-based networks and associated core networks. In one embodiment, it is determined that a set of computing hardware implementing a radio-based network for a customer has an excess capacity. At least one action is implemented to reallocate the excess capacity of the computing hardware.

Abstract: Disclosed are various embodiments for integrating multiple access technologies in a radio-based network. In one embodiment, first data is received from a first wireless device connected to a radio-based network via a first access technology. Second data is received from a second wireless device connected to the radio-based network via a second access technology. The first access technology and the second access technology use a different physical layer and a different media access control layer but use a network layer that is in common. The first data and the second data are processed at the network layer in the radio-based network using a common processing element.

Abstract: Disclosed are various embodiments for interfaces for creating radio-based private networks. In one embodiment, a request is received via an interface to create a radio-based private network for a customer. The request indicates a quantity of wireless devices that will connect to the radio-based private network. A quantity of radio units to serve the radio-based private network is determined based at least in part on the quantity of wireless devices. The radio units are preconfigured to implement a radio access network for the radio-based private network. A shipment is initiated to the customer of the radio units that have been preconfigured. Resources in a cloud provider network are provisioned to function as a core network for the radio-based private network.

Abstract: Instructions stored at a memory of an offloading card of a server, when executed at a processor of the offloading card, perform virtualization management tasks pertaining to a compute instance launched at the server, including allocation of memory of the server to the compute instance. In response to a request from the compute instance, a network function of a radio-based application is executed at an accelerator incorporated within the offloading card.

Abstract: Respective network addresses are assigned to a networking hardware device and a network function accelerator incorporated within an offloading card of a virtualization server by a control plane server of a virtualized computing service. A compute instance is launched at the virtualization server using a virtualization controller of the offloading card. The compute instance executes a network function of a radio-based application in response to a request received using the network address assigned to the hardware device, and requests execution of a second network function at the accelerator. The result of the second network function is sent to a radio unit of the application using the address assigned to the accelerator.

Abstract: A first security rule set for traffic of a compute instance run at a virtualization server is stored in response to a programmatic request. A second security rule set for traffic of a network function accelerator of the virtualization server is stored in response to another programmatic request. Prior to delivery of network messages to the compute instance or from the accelerator, compliance with the applicable security rule set is verified.

Abstract: Disclosed are various embodiments for extending cloud-based virtual private networks to radio-based networks. In one embodiment, a request from a client device to connect to a radio-based network is received. A virtual private cloud network of a cloud provider network to which the client device is permitted access is determined. The client device is provided with access to the virtual private cloud network through the radio-based network.

Abstract: Generally disclosed herein is an approach for cloning virtual machines during live migration where one or more new copies of a virtual machine can be created while the original virtual machine continues to run. The new copies can preserve a processing state, memory state, and local storage state. The new copies can also be distinguished from each other and the original by including different attributes for each copy.

Abstract: Disclosed are various embodiments for certificate-based authentication in radio-based networks. In one embodiment, a request for service from a radio-based network is received from a client device. The request for service includes a secure certificate. The radio-based network includes a radio access network and an associated core network. The authenticity of the secure certificate is validated based at least in part on a certificate signature in the secure certificate signed by a certificate authority. It is determined that an entity identified in the secure certificate is permitted to access the radio-based network. Radio-based network access is provided to the client device in response to determining that the entity is permitted to access the radio-based network.

Abstract: An offloading manager is launched at a computing device. The offloading manager schedules execution of a first set of network functions of a first radio-based application at a first network function accelerator, and the execution of a first set of network functions of a second radio-based application at a second network function accelerator.

Abstract: Disclosed are various embodiments that provide highly available data-processing network functions for radio-based networks. In one embodiment, routing information is received from a plurality of instantiations of a data-processing network function of a radio-based network. Based at least in part on the routing information, a route to a first instantiation of the plurality of instantiations of the data-processing network function is advertised. Based at least in part on the routing information, a backup route to a second instantiation of the plurality of instantiations of the data-processing network function is advertised.

Abstract: Connectivity between a radio-based application pipeline processing server and a control plane of a provider network is verified. Based on requests received at the control plane, a first isolated request handler, a second isolated request handler and an offloading manager are launched at the server. The offloading manager causes a first network function for which a request is received from the first request handler to be executed at a first network function accelerator of the server, and a second network function for which a request is received from the second request handler to be executed at a second network function accelerator of the server.