CPC H04L 41/0803 (2013.01) [G06F 9/45558 (2013.01); G06F 9/5077 (2013.01); H04L 12/4641 (2013.01); H04L 41/0806 (2013.01); H04L 41/0893 (2013.01); H04L 41/12 (2013.01); H04L 45/00 (2013.01); H04L 45/02 (2013.01); H04L 61/10 (2013.01); H04L 67/10 (2013.01); G06F 2009/45595 (2013.01); G06F 2209/5011 (2013.01); H04L 41/0213 (2013.01)] | 20 Claims |
1. A method, comprising:
performing, by one or more computing systems of a telecommunications infrastructure provider:
managing, by a communication manager, communications to and from a computing node in a virtual computer network of computing nodes,
wherein the computing nodes are virtual machine instances hosted on physical hosts in a substrate network of the telecommunications infrastructure provider,
wherein the communication manager is implemented on a first physical host of the physical hosts and includes a switch that physically connects to the substrate network,
wherein the managing comprises:
storing configuration information about the virtual computer network;
receiving, from the substrate network, a first communication addressed to the computing node hosted on the first physical host;
based at least in part on the configuration information, modifying the first communication and forwarding the first communication to the computing node;
receiving, from the substrate network, a second communication addressed to the computing node; and
based at least in part on the configuration information, dropping the second communication without forwarding the second communication to the computing node, and
wherein the managing further comprises:
in response to an address resolution protocol (ARP) communication from the computing node regarding a second computing node in the virtual computer network, sending a spoofed response to the ARP communication indicating a virtual hardware address of the second computing node.
|