Abstract: For a given cross-data-store transaction request at a storage service, a coordinator transmits respective voting transition requests to a plurality of log-based transaction managers (LTMs) configured for the respective data stores to which writes are directed in the transaction. The LTMs transmit responses to the coordinator based on data-store-specific conflict detection performed using contents of the voting transition requests and respective data-store-specific state transition logs. The coordinator determines a termination status of the cross-data-store transaction based on the LTMs' responses, and provides an indication of the termination status to the LTMs.

Abstract: At a radio-based application pipeline processing server at which a portion of a distributed unit (DU) of a radio-based application is implemented, a particular networking hardware device is selected from among several devices (which include least one device incorporated within a network function accelerator card and at least one device which is not part of an accelerator card) for transmission of at least a portion of mid-haul traffic to a centralized unit (CU). The mid-haul traffic is transmitted to the CU via the selected device. At least a portion of front-haul traffic is transmitted to a radio unit (RU) via a networking hardware device incorporated within a network function accelerator card of the server.

Abstract: Disclosed are various embodiments for extending cloud-based virtual private networks to radio-based networks. In one embodiment, a subnet of a virtual private cloud network of a cloud provider network is created in a radio-based network. An identifier of a subscriber identity module of a client device is registered in the virtual private cloud network. The subscriber identity module is assigned to a security group of the virtual private cloud network. A request from the client device to connect to the radio-based network is received, and the request presents the identifier. The virtual private cloud network to which the client device is permitted access is determined. The client device is provided with access to a resource on the virtual private cloud network through the radio-based network.

Abstract: Disclosed are various embodiments that provide demand-based allocation of ephemeral radio-based network resources. In one embodiment, a determination is made that an unmanned vehicle has unallocated computing capacity along a travel path. At least a portion of the unallocated computing capacity is provisioned for use by a customer for a time period as the unmanned vehicle progresses on the travel path.

Abstract: A control plane server of a virtualized computing service determines that connectivity is to be established between a first portion and a second portion of a distributed application. The first portion runs at a first edge location of a provider network, and the second portion runs at a second edge location. The control plane server transmits metadata associated with the second edge location to a connectivity manager at the first edge location. The metadata is used to establish a secure network channel between the connectivity manager and the second edge location. A message from the first portion of the distributed application is sent to the second portion via the channel.

Abstract: Disclosed are various embodiments for integrating multiple access technologies in a radio-based network. In one embodiment, first data is received from a first wireless device connected to a radio-based network via a first access technology. Second data is received from a second wireless device connected to the radio-based network via a second access technology. The first access technology and the second access technology use a different physical layer and a different media access control layer but use a network layer that is in common. The first data and the second data are processed at the network layer in the radio-based network using a common processing element.

Abstract: Disclosed are various embodiments for interfaces for creating radio-based private networks. In one embodiment, a request is received via an interface to create a radio-based private network for a customer. The request indicates a quantity of wireless devices that will connect to the radio-based private network. A quantity of radio units to serve the radio-based private network is determined based at least in part on the quantity of wireless devices. The radio units are preconfigured to implement a radio access network for the radio-based private network. A shipment is initiated to the customer of the radio units that have been preconfigured. Resources in a cloud provider network are provisioned to function as a core network for the radio-based private network.

Abstract: For a given cross-data-store transaction request at a storage service, a coordinator transmits respective voting transition requests to a plurality of log-based transaction managers (LTMs) configured for the respective data stores to which writes are directed in the transaction. The LTMs transmit responses to the coordinator based on data-store-specific conflict detection performed using contents of the voting transition requests and respective data-store-specific state transition logs. The coordinator determines a termination status of the cross-data-store transaction based on the LTMs' responses, and provides an indication of the termination status to the LTMs.

Abstract: Instructions stored at a memory of an offloading card of a server, when executed at a processor of the offloading card, perform virtualization management tasks pertaining to a compute instance launched at the server, including allocation of memory of the server to the compute instance. In response to a request from the compute instance, a network function of a radio-based application is executed at an accelerator incorporated within the offloading card.

Abstract: Respective network addresses are assigned to a networking hardware device and a network function accelerator incorporated within an offloading card of a virtualization server by a control plane server of a virtualized computing service. A compute instance is launched at the virtualization server using a virtualization controller of the offloading card. The compute instance executes a network function of a radio-based application in response to a request received using the network address assigned to the hardware device, and requests execution of a second network function at the accelerator. The result of the second network function is sent to a radio unit of the application using the address assigned to the accelerator.

Abstract: A first security rule set for traffic of a compute instance run at a virtualization server is stored in response to a programmatic request. A second security rule set for traffic of a network function accelerator of the virtualization server is stored in response to another programmatic request. Prior to delivery of network messages to the compute instance or from the accelerator, compliance with the applicable security rule set is verified.

Abstract: Disclosed are various embodiments for extending cloud-based virtual private networks to radio-based networks. In one embodiment, a request from a client device to connect to a radio-based network is received. A virtual private cloud network of a cloud provider network to which the client device is permitted access is determined. The client device is provided with access to the virtual private cloud network through the radio-based network.

Abstract: A control plane server of a virtualized computing service determines that connectivity is to be established between a first portion and a second portion of a distributed application. The first portion runs at a first edge location of a provider network, and the second portion runs at a second edge location. The control plane server transmits metadata associated with the second edge location to a connectivity manager at the first edge location. The metadata is used to establish a secure network channel between the connectivity manager and the second edge location. A message from the first portion of the distributed application is sent to the second portion via the channel.

Abstract: Disclosed are various embodiments for certificate-based authentication in radio-based networks. In one embodiment, a request for service from a radio-based network is received from a client device. The request for service includes a secure certificate. The radio-based network includes a radio access network and an associated core network. The authenticity of the secure certificate is validated based at least in part on a certificate signature in the secure certificate signed by a certificate authority. It is determined that an entity identified in the secure certificate is permitted to access the radio-based network. Radio-based network access is provided to the client device in response to determining that the entity is permitted to access the radio-based network.

Abstract: An offloading manager is launched at a computing device. The offloading manager schedules execution of a first set of network functions of a first radio-based application at a first network function accelerator, and the execution of a first set of network functions of a second radio-based application at a second network function accelerator.

Abstract: A first analysis based on at least a subset of collected health metrics of a monitored resource is performed at a health monitoring service. If the first analysis indicates that the probability that the monitored resource is in an unhealthy state is above a threshold, a mitigation action that includes directing at least some of the workload away from the monitored resource is implemented. In addition, a remediation analysis of the monitored resource is started to determine, using at least one additional health metric that was not examined in the first analysis, whether a longer-term remediation action is to be initiated.

Abstract: Connectivity between a radio-based application pipeline processing server and a control plane of a provider network is verified. Based on requests received at the control plane, a first isolated request handler, a second isolated request handler and an offloading manager are launched at the server. The offloading manager causes a first network function for which a request is received from the first request handler to be executed at a first network function accelerator of the server, and a second network function for which a request is received from the second request handler to be executed at a second network function accelerator of the server.

Abstract: Techniques are described for enabling users of a service provider network to create and configure “application profiles” that include parameters related to execution of user workloads at provider substrate extensions. Once an application profile is created, users can request the deployment of user workloads to provider substrate extensions by requesting instance launches based on a defined application profile. The service provider network can then automate the launch and placement of the user's workload at one or more provider substrate extensions using edge-optimized compute instances (e.g., compute instances tailored for execution within provider substrate extension environments).

Abstract: Techniques for API-based endpoint discovery and centralized load balancing involving provider substrate extension resources are described. A discovery coordinator service located within a provider network can identify one or more endpoints from a set of potentially distributed endpoints for a client to utilize, where endpoints may be located within provider substrate extensions of the provider network. The discovery coordinator service can analyze the loads of these endpoints, via client lease information, to identify nearby, low-load resources that may be most optimal for the client to use via providing minimal latency of access.

Abstract: A representation of a category of task offloaders is stored, in response to receiving a descriptor of the category, in a database of categories of offloaders which can be attached to servers of one or more classes. An indication of server configurations which include a task offloader of the category is provided via programmatic interfaces. A task is executed at a task offloader of a server with one of the server configurations.