US 12,437,080 B2
Automated packetless network reachability analysis
Catherine Dodge, Seattle, WA (US); Nikhil Reddy Cheruku, Falls Church, VA (US); John Byron Cook, Brooklyn, NY (US); Temesghen Kahsai Azene, Union City, CA (US); William Jo Kocik, Charles Town, WV (US); Sean Mclaughlin, Seattle, WA (US); Mark Edward Stalzer, Arlington, VA (US); Blake Whaley, Fairfax, VA (US); and Yiwen Wu, Fairfax, VA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Apr. 25, 2023, as Appl. No. 18/306,947.
Application 18/306,947 is a continuation of application No. 17/459,908, filed on Aug. 27, 2021, granted, now 11,671,442.
Application 17/459,908 is a continuation of application No. 16/020,865, filed on Jun. 27, 2018, granted, now 11,108,805, issued on Aug. 31, 2021.
Prior Publication US 2023/0262087 A1, Aug. 17, 2023
Int. Cl. G06F 21/57 (2013.01); H04L 9/40 (2022.01); H04L 41/0866 (2022.01); H04L 43/06 (2022.01)
CPC G06F 21/577 (2013.01) [H04L 41/0866 (2013.01); H04L 43/06 (2013.01); H04L 63/0272 (2013.01); H04L 63/1433 (2013.01); H04L 63/1441 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
one or more computing devices configured to implement an infrastructure provider network, configured to:
create a virtual network for a client, wherein the virtual network includes virtual machines hosted on physical hosts of the infrastructure provider network;
install agents on the physical hosts, wherein the agents are configured to collect data about individual ones of the virtual machines;
determine, based at least in part on the collected data and on network configuration data for the virtual network, an open port on one of the virtual machines and whether the open port is reachable from outside a trusted location, wherein said determine is performed without sending packets to the open port from outside the trusted location; and
generate a report that identifies the virtual machine, a port number of the open port, and whether the open port is reachable from outside the trusted location.