Abstract: A computerized method for directing transmission of a data packet within a distributed cloud computing system is disclosed that includes receiving the data packet by a receiving gateway instance deployed within the distributed cloud computing system, when a session corresponding to the data packet is found via a session lookup, forwarding the data packet to a destination in accordance with the session lookup, when the session is not found via the session lookup, determining whether one least one peer firewall instance is available, and when a first peer firewall instance is available and the data packet is a synchronize packet, forwarding the data packet to the first peer firewall instance. In some instances, the data packet is a TCP packet and in others, the data packet is received from either of a spoke gateway or a transit gateway that is deployed within the distributed cloud computing system.

Abstract: The subject matter of this specification can be implemented in, among other things, a method that includes determining, by a first computing device, a set of remote applications hosted by a second computing device including file type associations for each remote application. The first computing device determines a set of local applications and their file type associations. The each file type associated with a remote application, the first computing device determines whether the file type is also associated with a local application. Responsive to determining that the file type is associated with both a remote and local application, the first computing device configures a proxy component with parameters specifying the remote application and the local application. The proxy component is configured to determine whether to open a requested file of the file type with the remote application or the local application based upon the current client/server environment.

Abstract: The invention provides an alternative applications programming interface (API) for a software application to interface with and to control and coordinate the operation of a variety of specialty devices, including a barcode scanning device and a label printing device. In some embodiments, this alternative API is provided via a software application interface module (SAIM) that is remotely accessible to a software application module (SAM) via a computer network. The SAIM provides for interface and control of specialty devices that would otherwise be un-accessible to a software application module (SAM), via employment of a device specific interface module (DSIM), which functions like a device driver to specialty devices that can be geographically distributed away from the software application module (SAM) and sway from the software application interface module (SAIM), and also function in circumstances where the software application module (SAM) is mobile.

Abstract: The technology disclosed relates to resolution of conflicts between a requested internet service, requested by an internet service requesting server, and a package internet services. The method disclosed includes sending a conflict check result message to an internet service requesting server, indicating a presence of a conflict between a requested internet service requested by the requesting server and a package of internet services. The method includes receiving from the internet service requesting server a response including a selection from (i) an alternate internet service in the package of internet services to substitute for the requested internet service; (ii) a request to replace an existing connection with a service in the package of internet services with the requested internet service; and (iii) a request to initiate a custom resolution application. The method then responsively performs a respective conflict resolution step.

Abstract: A computerized method for directing transmission of a data packet within a distributed cloud computing system is disclosed. The computerized method includes operations of receiving, by a receiving gateway instance deployed within the distributed cloud computing system, the data packet, when a session corresponding to the data packet is found via a session lookup, forwarding the data packet to a destination in accordance with the session lookup, and when the session is not found via the session lookup, creating a tentative forward session and forwarding the data packet to a peer gateway instance. In some instances, the data packet is a User Datagram Protocol (UDP) packet. In some instances, the data packet is received from either of a spoke gateway instance or a transit gateway instance, and wherein the spoke gateway instance or the transit gateway instance is deployed within the distributed cloud computing system.

Abstract: The technology disclosed relates to detection and resolution of conflicts between requested internet services and package of internet services associated with a domain. The method disclosed includes receiving a request from a client to add a requested internet service to a package of internet services. The method includes searching a domain name system (DNS) database for DNS records or a DNS server for external domains having attribute fields indicating attributes of the internet services in the package of internet services. The method includes comparing attributes of the requested internet service to attribute fields for the internet services in the package of internet services using a set of conflict definitions to identify attributes of the internet service requested conflicting with attributes of the package of internet services. When conflicting attributes are identified, the method includes invoking a resolution process to resolve the conflict.

Abstract: Described systems and methods enable protecting client devices (e.g., personal computers and IoT devices) implementing encrypted DNS protocols against harmful or inappropriate Internet content. A DNS proxy intercepts an attempt to establish an encrypted communication session between a client device and a DNS server. Without decrypting any communications, some embodiments of the DNS proxy determine an identifier of the respective session and an identifier of the client device, and send a query tracer connecting the session identifier with the client identifier to a security server. In some embodiments, the security server obtains the domain name included in an encrypted DNS query from the DNS server and instructs the DNS server to allow or block access of the client device to the respective Internet domain according to a device- and/or user-specific access policy.

Abstract: A method of media state synchronization is described. An applicative entity sends a request to a rules control entity asking the rules control entity to dispatch a message to the applicative entity describing the state of the media controlled by this applicative entity and currently being used. On expiry of a default deadline or one contained in the request, the rules control entity sends the applicative entity a message in which the rules control entity describes the state of the media.

Abstract: A control plane server of a virtualized computing service determines that connectivity is to be established between a first portion and a second portion of a distributed application. The first portion runs at a first edge location of a provider network, and the second portion runs at a second edge location. The control plane server transmits metadata associated with the second edge location to a connectivity manager at the first edge location. The metadata is used to establish a secure network channel between the connectivity manager and the second edge location. A message from the first portion of the distributed application is sent to the second portion via the channel.

Abstract: Systems and methods for implementing direct bidirectional communications using a management console are described. A client of an application development service may request an application development resource be created. Responsive to this request, a resource may be created and the service may return an executable Integrated Development Environment (IDE) to the client to interface with the created resource. The IDE may then request an agent be executed to provide an interface between the IDE and the resource. An agent is then started and a websocket address with authorization credentials may be provided to the IDE. The IDE may then open a direct, bidirectional communications session using websockets with the agent, with the agent providing interfaces to customizable data for application development.

Abstract: A method for processing a cloud service in a cloud system, wherein the cloud system includes a hosted cloud, an allied cloud, and an alliance management apparatus, wherein the hosted cloud includes a first region, the allied cloud includes a second region, the hosted cloud further provides a virtual region for a user, and the virtual region is mapped by the second region on the hosted cloud. The alliance management apparatus enables a user of the hosted cloud to obtain unified experience when the user accesses the first region and the virtual region in the cloud system, for example, unified experience in control interface access, and unified experience in application programming interface (API) access.

Abstract: The present disclosure generally relates to audio output for time-based notifications. Enhanced alerts for time-based notifications based on various notification conditions provides users with clarity about which notifications are being output, thereby providing an improved user interface.

Abstract: A method of providing interactive media including receiving an operator input of metadata tags and transmitting a network call to social media platform servers. The network call includes a query for user posts to the social media platform server that include the metadata tags. In response to the query for users posts, the method includes receiving user post data associated with user posts that include the metadata tags. The method includes comparing a timestamp included in the received user post data with timestamps of prior user post timestamps in a stored list of prior user post data. Upon determining that the timestamp included in the received user post data is more recent than prior user post timestamps, the method includes transmitting commands to hardware devices based on the user post data. The commands are configured to activate actions of the hardware devices.

Abstract: The systems and methods described herein can enable the indirect transmission of session data between different domains. The system can pass the session data through a hashing function so that the data from a given domain remains private and secure to the specific domain. The system can generate clusters of associated domains for a given client device that the system can use to maintain a session between the client device and the domain.

Abstract: Systems and methods are provided for connecting a client to a desired network endpoint. Example systems and methods include receiving, at a server, a request identifying a network endpoint to be accessed, configuring a proxy instance, the proxy instance being configured to receive a connection from a client to forward that client connection to the identified network endpoint, and deleting the proxy instance upon occurrence of a session end criteria. In some embodiments, the request identifying a network endpoint to the server is received from the network endpoint. In some embodiments, the request identifying a network endpoint to the server is received from the client. In some embodiments, a platform as a service is used to configure the proxy instance. In some embodiments, the request identifying a network endpoint is made to the platform as a service rather than to the server, which is not included in the embodiment.

Abstract: A data security and fraud prevention system is configured to transmit a web form to a first device, receive through the web form first data including first user private data associated with a first user, receive a request to share the web form with a second user, create a cache storage and an unique identifier associated with the web form, and mask the first user private data to prevent access to the first user private data by the second user. The data security and fraud prevention system is further configured to encrypt the unique identifier, generate a share session between the first device and a second device associated with the second user, receive through the web form second data including second user private data associated with the second user, mask the second user private data to prevent access to the second user private data by the first user, and aggregate the first data and the second data to complete the web form.

Abstract: Disclosed are various examples of unified application management for heterogeneous application delivery. Application metadata for various applications can be received from management services and can be analyzed according to application unification rules to identify multiple application variants of a particular application. A unified application can be generated to represent the multiple application variants that are identified. Application entitlements can be defined for the unified application model, and the management services can provide access to the particular application according to the entitlements.

Abstract: Exemplary embodiments relate to improvements in the design of a messaging inbox. The inbox may display different units or “modules” for providing a user with quick access to different inbox functionalities that they might not otherwise be aware of (or inclined to use on a regular basis). After a number of recent or unread messages are shown in the inbox's initial interface, the messages end and are replaced with modules. Many different types of functionality may be the subject of the modules (e.g., a module for sharing local content such as photos from a photo album, a People/States module, Top Contacts, New Behavior, Live Videos, Events, Businesses, or Messaging Stickers). Once the available modules have been scrolled through, the interface may revert to more messages, such as less-recent or previously read threads from the original messages. Unread threads may also be collapsed in the top section of the inbox, or included in a module.

Abstract: Systems, devices, and methods for media processing and streaming, including receiving content to be prepared for a 5G media streaming (5GMS) network; receiving a content preparation template (CPT), wherein the CPT specifies input characteristics of an input Common Media Application Format (CMAF) track corresponding to the content, output characteristics of a set of output CMAF tracks corresponding to the content, and encoding parameters corresponding to the set of output CMAF tracks; preparing the content according to the CPT; and streaming the prepared content over the 5GMS network to a media streaming client.

Abstract: Exemplary embodiments relate to improvements in the design of a messaging inbox. The inbox may display different units or “modules” for providing a user with quick access to different inbox functionalities. After a number of recent or unread messages are shown in the inbox's initial interface, the messages end and are replaced with modules. A threshold may be defined for the number of recent/unread messages to display before transitioning to modules. The threshold may be determined dynamically based on a minimum and/or maximum number of messages to display. The determination may be based on the current time, whether there is an active conversation in a thread, whether there are unread messages in a thread, etc. The determination may vary from user to user based, for example, on whether the user is a relatively active user, and/or how the user has used the messaging application in the past.