Patents by Inventor Omer Hashmi
Omer Hashmi has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Publication number: 20250126046Abstract: Network pathways are identified to transfer packets between a pair of regional virtual traffic hubs of a provider network. At a first hub of the pair, a first action is performed, resulting in a transmission of a packet received from a first isolated network to the second hub along a pathway selected using dynamic routing parameters. At the second hub, a second action is performed, resulting in the transmission of the packet to a destination within a second isolated network.Type: ApplicationFiled: December 18, 2024Publication date: April 17, 2025Applicant: Amazon Technologies, Inc.Inventors: Bashuman Deb, Paul John Tillotson, Thomas Nguyen Spendley, Omer Hashmi, Baihu Qian, Mohamed Nader Farahat Hassan
-
Patent number: 12212482Abstract: Network pathways are identified to transfer packets between a pair of regional virtual traffic hubs of a provider network. At a first hub of the pair, a first action is performed, resulting in a transmission of a packet received from a first isolated network to the second hub along a pathway selected using dynamic routing parameters. At the second hub, a second action is performed, resulting in the transmission of the packet to a destination within a second isolated network.Type: GrantFiled: September 16, 2022Date of Patent: January 28, 2025Assignee: Amazon Technologies, Inc.Inventors: Bashuman Deb, Paul John Tillotson, Thomas Nguyen Spendley, Omer Hashmi, Baihu Qian, Mohamed Nader Farahat Hassan
-
Patent number: 12160366Abstract: A message indicating an auxiliary task associated with traffic transmitted via a virtual router between a pair of isolated networks is received at an offloading device. A stack multiplexer at the offloading device selects a protocol stack instance to process the message. A result of the auxiliary task is obtained by the multiplexer from the selected protocol stack instance and transmitted to the virtual router, where it is used to transmit a packet between the isolated networks.Type: GrantFiled: March 30, 2021Date of Patent: December 3, 2024Assignee: Amazon Technologies, Inc.Inventors: Bashuman Deb, Omer Hashmi, Thomas Nguyen Spendley, Baihu Qian, Guru Kannan, Shridhar Kulkarni, Paul John Tillotson, Ramin Ali Dousti, Indira Radhika Pulla, Yuxin Ren, Fahed Hijazi, Xiyuan Gou, Steve Ge, Nicholas Ryan Lombardi, Brandon Michael LaRue, Jaywant U. Kapadnis, Anoop Dawani
-
Publication number: 20240333775Abstract: Systems and methods are provided for obtaining policy data associated with a private network implemented at least partly within a cloud provider network; establishing, based on the policy data, a first segment within the private network, wherein in a first geographic region of the cloud provider network, traffic associated with the first segment is isolated from traffic associated with a second segment of the private network, and wherein in a second geographic region of the cloud provider network, traffic associated with the first segment is isolated from traffic associated with a third segment of the private network; obtaining metadata indicating an isolated network of the cloud provider network is associated with the first segment; and enabling the isolated network to communicate, over the first segment, across the first geographic region and the second geographic region.Type: ApplicationFiled: June 12, 2024Publication date: October 3, 2024Inventors: Baihu Qian, Bashuman Deb, Justin Lin Hsieh, Daniel William Dacosta, Nick Matthews, Viktor Heorhiadi, Lalith Kumar Ramamoorthi, Anoop Dawani, Omer Hashmi, Thomas Nguyen Spendley
-
Patent number: 12021902Abstract: Systems and methods are provided for evaluation of communication paths through networks to determine whether communication is permitted across one or more internal network boundaries. The analysis may be used to determine whether a node in one isolated network (e.g., VPC, VPN, client on-premise network, etc.) is able to communicate with a node in another isolated network across region and/or segment boundaries. The automated analysis can allow users (e.g., network administrators) to see what high-level policies (e.g., Cloud WAN policies written in a declarative language) are interfering with or permitting communication between the nodes.Type: GrantFiled: December 10, 2021Date of Patent: June 25, 2024Assignee: Amazon Technologies, Inc.Inventors: Baihu Qian, Bashuman Deb, Justin Lin Hsieh, Daniel William Dacosta, Nick Matthews, Viktor Heorhiadi, Lalith Kumar Ramamoorthi, Anoop Dawani, Omer Hashmi, Thomas Nguyen Spendley
-
Publication number: 20240187332Abstract: Metadata indicating that a virtual traffic hub enabling connectivity between a plurality of isolated networks has been established is stored. A determination is made that a first entry of a first isolated network attached to the hub is to be represented in a second routing table of a second isolated network attached to the hub, e.g., to enable network packets originating at resources of the second isolated network to be transmitted via the hub to the first isolated network. A new entry corresponding to the first entry is included in the second routing table.Type: ApplicationFiled: December 12, 2023Publication date: June 6, 2024Applicant: Amazon Technologies, Inc.Inventors: Paul John Tillotson, Bashuman Deb, Thomas Spendley, Omer Hashmi, Baihu Qian, Alexander Justin Penney
-
Patent number: 11991211Abstract: Systems and methods are provided for enforcing symmetric flows of cross-region network traffic through firewalls in multi-region network environments. Enforcement may be configured automatically by analyzing network policy data to identify cross-region traffic that is to be firewalled, and configuring gateway nodes in the various regions to implement symmetric bidirectional flows through any firewalls in the communication path. Beneficially, by enforcing symmetric bi-directional flows of traffic through any firewalls in a communication path, the firewalls may maintain the state of a given communication session even when the communication session is between endpoints in different regions that have different architectures.Type: GrantFiled: December 10, 2021Date of Patent: May 21, 2024Assignee: Amazon Technologies, Inc.Inventors: Hrushikesh Jaibheem Gangur, Tomasz Jozef Adamski, Christian Elsen, Baihu Qian, Nick Matthews, Omer Hashmi, Bashuman Deb, Thomas Nguyen Spendley
-
Publication number: 20240113998Abstract: Connectivity is enabled between a first and second isolated network using a virtual traffic hub that includes a decision master node responsible for determining a routing action for a packet received at the hub. At the hub, a determination is made that a particular domain name system (DNS) message being directed to a first resource in the first isolated network is to include an indication of a second resource in the second isolated network. The second resource is assigned a network address within a private address range of the second isolated network, which overlaps with a private address range being used in the first isolated network. The hub causes a transformed version of the network address to be included in the DNS message delivered to the first resource.Type: ApplicationFiled: October 5, 2023Publication date: April 4, 2024Applicant: Amazon Technologies, Inc.Inventors: Paul John Tillotson, Bashuman Deb, Thomas Spendley, Omer Hashmi, Baihu Qian, Alexander Justin Penney
-
Patent number: 11936558Abstract: Systems and methods are provided for evaluation of networks and changes thereto using automated analysis of network models. The automated analysis can be used to determine how to implement and mutate networks efficiently and effectively, to determine whether and why network resources are unable to communicate with each other, and the like. Automated analysis can allow users (e.g., network administrators) to define networks and pose changes to networks using high-level policies (e.g., written in a declarative language), have those polices automatically translated to lower-level implementation operations for analysis, and in some cases have results of the analysis presented back to the users in an easy-to-understand form.Type: GrantFiled: December 10, 2021Date of Patent: March 19, 2024Assignee: Amazon Technologies, Inc.Inventors: Baihu Qian, Bashuman Deb, Justin Lin Hsieh, Daniel William Dacosta, Nick Matthews, Anoop Dawani, Omer Hashmi, Thomas Nguyen Spendley, Viktor Heorhiadi
-
Publication number: 20240039895Abstract: A request to establish an encrypted VPN connection between a network and the provider network via a dedicated direct physical link and a set of resources of the provider network is received. An isolated virtual network (IVN) is established to implement an encryption virtual private gateway to be used for the connection. Protocol processing engines (PPEs) are instantiated within the IVN, address information of the PPEs is exchanged with the external network and an encrypted VPN tunnel is configured between the PPEs and the external network. Routing information pertaining to the set of resources is provided to the external network via at least one of the encrypted VPN tunnels, enabling routing of customer data to the set of resources within the provider network from the external network via an encrypted VPN tunnel implemented over a dedicated direct physical link between the external network and the provider network.Type: ApplicationFiled: October 16, 2023Publication date: February 1, 2024Applicant: Amazon Technologies, Inc.Inventors: Po-Chun Chen, Omer Hashmi, Sanjay Bhal
-
Patent number: 11882017Abstract: Metadata indicating that a virtual traffic hub enabling connectivity between a plurality of isolated networks has been established is stored. A determination is made that a first entry of a first isolated network attached to the hub is to be represented in a second routing table of a second isolated network attached to the hub, e.g., to enable network packets originating at resources of the second isolated network to be transmitted via the hub to the first isolated network. A new entry corresponding to the first entry is included in the second routing table.Type: GrantFiled: September 2, 2022Date of Patent: January 23, 2024Assignee: Amazon Technologies, Inc.Inventors: Paul John Tillotson, Bashuman Deb, Thomas Spendley, Omer Hashmi, Baihu Qian, Alexander Justin Penney
-
Patent number: 11855893Abstract: Systems and methods are provided for management of network segments that cross geographic regions and/or other types of network divisions in a cloud-based network environment. A cloud-based network provider's geographically-dispersed network infrastructure may serve as the core of a client's private wide area network, and the client may define isolated segments to which other networks (virtual private clouds, virtual private networks, etc.) may be attached. The various segments may remain logically isolated from each other even when implemented across some or all of the same regions—and using the same physical and/or virtual routing components—as other segments of the same client and/or other clients.Type: GrantFiled: November 24, 2021Date of Patent: December 26, 2023Assignee: Amazon Technologies, Inc.Inventors: Anoop Dawani, Bashuman Deb, Baihu Qian, Omer Hashmi, Nick Matthews, Shridhar Kulkarni, Thomas Nguyen Spendley, Steve Ge, Justin Lin Hsieh, Guru Kannan, Alok Mishra
-
Patent number: 11831600Abstract: Connectivity is enabled between a first and second isolated network using a virtual traffic hub that includes a decision master node responsible for determining a routing action for a packet received at the hub. At the hub, a determination is made that a particular domain name system (DNS) message being directed to a first resource in the first isolated network is to include an indication of a second resource in the second isolated network. The second resource is assigned a network address within a private address range of the second isolated network, which overlaps with a private address range being used in the first isolated network. The hub causes a transformed version of the network address to be included in the DNS message delivered to the first resource.Type: GrantFiled: November 6, 2020Date of Patent: November 28, 2023Assignee: Amazon Technologies, Inc.Inventors: Paul John Tillotson, Bashuman Deb, Thomas Spendley, Omer Hashmi, Baihu Qian, Alexander Justin Penney
-
Patent number: 11831611Abstract: A request to establish an encrypted VPN connection between a network external to a provider network connected to the provider network via a dedicated direct physical link and a set of resources of the provider network is received. A new isolated virtual network (IVN) is established to implement an encryption virtual private gateway to be used for the connection. One or more protocol processing engines (PPEs) are instantiated within the IVN, address information of the one or more PPEs is exchanged with the external network and a respective encrypted VPN tunnel is configured between each of the PPEs and the external network. Routing information pertaining to the set of resources is provided to the external network via at least one of the encrypted VPN tunnels, enabling routing of customer data to the set of resources within the provider network from the external network via an encrypted VPN tunnel implemented over a dedicated direct physical link between the external network and the provider network.Type: GrantFiled: February 7, 2020Date of Patent: November 28, 2023Assignee: Amazon Technologies, Inc.Inventors: Po-Chun Chen, Omer Hashmi, Sanjay Bhal
-
Patent number: 11824773Abstract: A pair of virtual routers is configured. In response to programmatic requests, dynamic transfer of routing information between the routers in accordance with configuration settings indicated by a client is enabled. The routing information is associated with a set of isolated networks to which the virtual routers are attached. A network packet originating at an address in a first isolated network is transmitted to an address in a second isolated network using a route determined from routing information transmitted between the virtual routers according to the configuration settings.Type: GrantFiled: March 30, 2021Date of Patent: November 21, 2023Assignee: Amazon Technologies, Inc.Inventors: Baihu Qian, Omer Hashmi, Thomas Nguyen Spendley, Bashuman Deb, Shridhar Kulkarni, Paul John Tillotson, Indira Radhika Pulla, Ramin Ali Dousti, Nicholas Ryan Lombardi, Steve Ge, Nick Matthews, Anoop Dawani
-
Patent number: 11799755Abstract: Systems and methods are provided for management of network segments that cross geographic regions and/or other types of network divisions in a cloud-based network environment. Gateway may manage traffic across regions using routing metadata that includes a segment identifier. The gateways may also signal their routes across regions based on segment data, and implement the signaled routes using segment-based routing policies. Route selection may be performed using optimization data.Type: GrantFiled: November 24, 2021Date of Patent: October 24, 2023Assignee: Amazon Technologies, Inc.Inventors: Anoop Dawani, Bashuman Deb, Baihu Qian, Omer Hashmi, Nick Matthews, Shridhar Kulkarni, Thomas Nguyen Spendley, Indira Radhika Pulla, David Jonathan Adams, Nicholas Ryan Lombardi, Brandon Michael LaRue, Aaron Scott DeBruin, Ramin Ali Dousti
-
Patent number: 11729077Abstract: This disclosure describes techniques for configuring and managing scalable global private networks associated with a service provider. Different input mechanisms, such as an API, a UI, or a CLI may be utilized to configure, and manage a global private network that spans across the cloud in different geographic locations and connects to different stand-alone networks. The user may proactively use the input mechanisms to configure and query different network resources to reactively configure settings for reacting to one or more events. The input mechanisms may also be utilized to define the network resources to be modeled within the global private network as well as connections within the global network. A user may configure events/metrics to be monitored, tasks/workflows to be performed, and the like. In some configurations, a network management service (NMS) may perform health monitoring and reachability monitoring to identify possible issues in the global network.Type: GrantFiled: November 29, 2019Date of Patent: August 15, 2023Assignee: Amazon Technologies, Inc.Inventors: Baihu Qian, Bashuman Deb, Omer Hashmi, Thomas Nguyen Spendley, Nikhil Reddy Cheruku, Alok Mishra, Alexander Justin Penney
-
Publication number: 20230179517Abstract: An indication of a set of premises between which network traffic is to be routed via a private fiber backbone of a provider network is obtained. Respective virtual routers are configured for a first premise and a second premise, and connectivity is established between the virtual routers and routing information sources at the premises. Contents of at least one network packet originating at the first premise are transmitted to the second premise via the private fiber backbone using routing information obtained at the virtual routers from the routing information source at the second premise.Type: ApplicationFiled: January 27, 2023Publication date: June 8, 2023Applicant: Amazon Technologies, Inc.Inventors: Baihu Qian, Omer Hashmi, Thomas Nguyen Spendley, Bashuman Deb, Shridhar Kulkarni, Paul John Tillotson, Ramin Ali Dousti, Indira Radhika Pulla, Steve Ge, Nicholas Ryan Lombardi, Nick Matthews, Anoop Dawani
-
Publication number: 20230079670Abstract: Network pathways are identified to transfer packets between a pair of regional virtual traffic hubs of a provider network. At a first hub of the pair, a first action is performed, resulting in a transmission of a packet received from a first isolated network to the second hub along a pathway selected using dynamic routing parameters. At the second hub, a second action is performed, resulting in the transmission of the packet to a destination within a second isolated network.Type: ApplicationFiled: September 16, 2022Publication date: March 16, 2023Applicant: Amazon Technologies, Inc.Inventors: Bashuman Deb, Paul John Tillotson, Thomas Nguyen Spendley, Omer Hashmi, Baihu Qian, Mohamed Nader Farahat Hassan
-
Publication number: 20230077765Abstract: Metadata indicating that a virtual traffic hub enabling connectivity between a plurality of isolated networks has been established is stored. A determination is made that a first entry of a first isolated network attached to the hub is to be represented in a second routing table of a second isolated network attached to the hub, e.g., to enable network packets originating at resources of the second isolated network to be transmitted via the hub to the first isolated network. A new entry corresponding to the first entry is included in the second routing table.Type: ApplicationFiled: September 2, 2022Publication date: March 16, 2023Applicant: Amazon Technologies, Inc.Inventors: Paul John Tillotson, Bashuman Deb, Thomas Spendley, Omer Hashmi, Baihu Qian, Alexander Justin Penney