Abstract: Techniques for exposing network health over network connections in service provider network are disclosed. Monitors such as connection tracking modules may be configured to process network information (e.g., TCP connection state information) relating to network traffic and to transmit the network information to a health manager for analysis. As an example, a customer may request network information relating to a virtual instance provided by a service provider. In response to the request, TCP connection state information relating to the virtual instance may be extracted and processed to determine a network health condition. Information relating to the determined network health condition may be provided to the requesting customer.

Abstract: A system for propagating network configuration changes in a distributed computing system includes one or more processors and memory that includes instructions, that when executed by the one or more processors, cause the processors to receive a configuration propagation instructions from a client, receive a network configuration change request from the client, generate a first command instruction, and transmit the first command instruction to one or more of a plurality of network devices in accordance with the configuration propagation instruction. The first command instruction instructs the plurality of network devices to change state from a first state to a second state. The second state corresponds with a network configuration contained in the network configuration change request.

Abstract: Components associated with the management, instantiation, and control of instances, such as virtual machine instances, are configurable for immutability. In some embodiments, immutability is requested for one or more functionalities affecting or otherwise associated with an instance. Information regarding the request, as well as the requested immutability, may be propagated to one or more components, such as management components, for enforcement. Instances configured to have some or part of their functionality designated as immutable may be used to implement some or all of the management components themselves, and thus be used as a part (or entirety) of a management subsystem for other instantiations.