| CPC H04L 45/66 (2013.01) [H04L 12/4641 (2013.01); H04L 45/745 (2013.01); H04L 61/5007 (2022.05)] | 20 Claims |
|
1. A system, comprising:
a control plane server of a virtualized computing service of a provider network, wherein the control plane server is located at a data center of the provider network; and
a networking manager of an extension server of the virtualized computing service, wherein the extension server is located at a premise external to the provider network;
wherein the control plane server is configured to:
cause attachment of a cloud-access virtual network interface to a compute instance of the virtualized computing service, wherein the compute instance runs at the extension server, and wherein the cloud-access virtual network interface is assigned a first Internet Protocol (IP) address from a range of IP addresses of an isolated virtual network configured at the virtualized computing service; and
cause attachment of a local-premise-access virtual network interface to the compute instance, wherein the local-premise-access virtual network interface is assigned a particular media access control (MAC) address by the control plane server, and wherein the local-premise-access virtual network interface is not assigned an IP address from the range of network addresses of the isolated virtual network; and
wherein the networking manager is configured to:
in response to determining at least that a first data link layer frame received at the extension server comprises a first IP packet with a destination address within a set of virtualization host network addresses of a substrate network of the virtualized computing service,
utilize an encapsulation protocol of the virtualized computing service to extract a second IP packet from the first IP packet; and
in response to determining that the destination address of the second IP packet matches the first IP address, deliver the second IP packet to the compute instance; and
in response to determining that a destination MAC address of a second data link layer frame received at the extension server matches the particular MAC address, wherein the second data link layer frame does not comprise an IP packet with the destination address of the first IP packet, deliver, without utilizing the encapsulation protocol, at least a portion of contents of the second data link layer frame to the compute instance.
|