Abstract: In an embodiment, a method comprises receiving an indication that a user selected social network data that is displayed, on a client device, concurrently with offer data that indicates a coupon offer; wherein prior to receiving the indication, the user of the client device is incapable of accessing the coupon offer; in response to receiving the indication that the user selected the social network data, allowing the user to access the coupon offer, and causing a message to be sent to each user of a plurality of users that are identified, in a social network, as connected to the user, wherein the message includes data about the coupon offer or a coupon provider that initiated the coupon offer; wherein the method is performed by one or more computing devices.

Abstract: A firewall device may include a forwarding component that includes a filter block. The filter block may obtain a first hardware-implemented filter, where a hardware implementation limits the first hardware-implemented filter to a maximum quantity of rules; determine whether a last rule associated with the accessed hardware-implemented filter includes a split-filter action, where the split-filter action identifies a second hardware-implemented filter; and link the second hardware-implemented filter to the first hardware-implemented filter to make the second hardware-implemented filter a logical continuation of the first hardware-implemented filter, in response to determining that the last rule includes the split-filter action.

Abstract: In one embodiment, a method includes receiving a value associated with a data packet and identifying a data set based on the value. The data set is associated with a range of values and represents routing actions. The data set is a first data set from a plurality of data sets if the value is included in the range of values associated with the first data set. The data set is a default data set if the value is not included in a range of values associated with a data set from the plurality of data sets. The method includes combining the first data set with the default data set if the first data set is identified. The method includes combining the default data set with an except data set if the default data set is identified.

Abstract: An example network device includes a control plane and a filter lookup module that includes a Bloom filter that supports parallel lookup of a maximum number of different prefix lengths. The filter lookup module accesses the Bloom filter to determine a longest length prefix that matches an entry in a set of prefixes. The control plane receives prefix lengths that include more than the maximum number of different prefix lengths supported by the Bloom filter, wherein the set of prefix lengths is associated with one application, generates, based on the received set of prefix lengths, two or more groups of different prefix lengths, wherein each of the two or more groups of different prefix lengths includes no more than the maximum number of different prefix lengths, and programs the filter lookup module with the two or more groups of different prefix lengths associated with the one application.

Abstract: In an embodiment, a method comprises receiving, at a social network coupon platform, a request to display coupon data regarding a particular coupon that is provided by a coupon provider, wherein a user that is registered with a social network provider initiated the request; in response to receiving the request, sending, from the social network coupon platform, the coupon data to be displayed to the user; receiving, at the social network coupon platform, from the social network provider, profile data that includes profile information of the user; in response to receiving the profile data, allowing the user access to the particular coupon; wherein the method is performed by one or more computing devices.

Abstract: Described herein is a method and system for distributing requests and responses across a multi-core system. Each core executes a packet engine that further processes data packets allocated to that core. A flow distributor executing within the multi-core system forwards client requests to a packet engine on a core that is selected based on a value generated when a hash is applied to a tuple comprising a client IP address, a client port, a server IP address and a server port identified in the request. The packet engine maintains the client IP address, selects a first port of the core, and determines whether a hash of a tuple comprising those values identifies the selected core. A modification is then made to the client request so that the client request includes a tuple comprising the client IP address, the server IP address, the first port and the server port.

Abstract: In an embodiment, a method comprises receiving an indication that a user selected social network data that is displayed, on a client device, concurrently with offer data that indicates a coupon offer; wherein prior to receiving the indication, the user of the client device is incapable of accessing the coupon offer; in response to receiving the indication that the user selected the social network data, allowing the user to access the coupon offer, and causing a message to be sent to each user of a plurality of users that are identified, in a social network, as connected to the user, wherein the message includes data about the coupon offer or a coupon provider that initiated the coupon offer; wherein the method is performed by one or more computing devices.

Abstract: A query builder provided according to an aspect of the present invention facilitates users to conveniently generate database queries directed to database servers storing data elements organized according to attributes. In an embodiment, configuration data indicating a comparison predicate to be used for each combination of an attribute and a conditional operation is maintained. A user may then provide as inputs a first attribute, a first conditional operation and a first value. In response, the query builder examines the configuration data to determine a first comparison predicate specified for the combination of the first attribute and the first conditional operation. The query builder incorporates the first value in the first comparison predicate to construct a second comparison predicate and then forms a first database query with the second comparison predicate.

Abstract: The present solution is directed to providing, transparently and seamlessly to any client or server, layer 2 redirection of client requests to any services of a device deployed in parallel to an intermediary device An intermediary device deployed between the client and the server may intercept a client request and check if the request is to be processed by a service provided by one of the devices deployed in parallel with the intermediary device. The service may be any type and form of service or feature for processing, checking or modifying the request, including a firewall, a cache server, a encryption/decryption engine, a security device, an authentication device, an authorization device or any other type and form of service or device described herein. The intermediary device may select the machine to process the request and use layer 2 redirection to the machine.

Abstract: Techniques are provided for determining, by a coupon distributor, a value for a coupon of a product or service that will be provided by a coupon provider. The coupon provider provides, to the coupon distributor, one or both of a budget value that indicates an amount the coupon provider is willing to pay the coupon distributor for distributing the coupon, and a redemption rate that indicates one or more target redemption rates. The coupon provider uses a coupon value equation to calculate the coupon value based on a budget value and a redemption rate. The coupon provider might estimate that no coupon value will allow the coupon provider to stay within the budget and ensure that the actual redemption rate will be close to a particular redemption rate, which may or may not be specified by the coupon distributor.

Abstract: Techniques are provided for allowing a user to access a coupon. In one approach, a social network coupon platform receives a request to display coupon data regarding a particular coupon that is provided by a coupon provider, wherein a user that is registered with a social network provider initiated the request. In response to receiving the request, sending the coupon data is sent form the social network coupon platform to be displayed to the user. Profile data that includes profile information of the user is received at the social network coupon platform from the social network provider. In response to receiving the profile data, the user is allowed access to the particular coupon.

Abstract: In one embodiment, a method includes receiving a policy vectors associated with a switch fabric, determining a compression scheme, and producing a compressed vector based on the policy vector and the compression scheme. The policy vector is represented by a bit sequence and has a plurality of policy bit values. A policy bit value from the plurality of policy bit vales is configured to trigger an action associated with a data packet in the switch fabric. The compression scheme is determined based on a portion of the policy vector.

Abstract: Systems and methods are described for link load balancing, by a multi-core intermediary device, a plurality of Internet links. The method may include load balancing, by a multi-core device intermediary to a plurality of devices and a plurality of Internet links, network traffic across the plurality of Internet links. The multi-core device providing persistence of network traffic to a selected Internet link based on a persistence type. A first core of the multi-core device receives, a packet to be transmitted via an Internet link to be selected from the plurality of Internet links. The first core sends to a second core of the multi-core device a request for persistence information responsive to identifying that the second core is an owner core of a session for persistence based on the persistence type.

Abstract: An example computing device includes a prefix lookup module, and a Bloom filter that includes a set of queues. The prefix lookup module is configured to receive policy configuration information, examine a state of a queue of the set of queues, and determine whether to bypass the first Bloom filter based on the policy configuration information and the state of the queue. In one example, the prefix lookup module may be configured to, using the policy configuration information, determine to bypass the Bloom filter when the queue is full. In another example, the prefix lookup module may be configured to, using the policy configuration information, determine not to bypass the Bloom filter and send a lookup request to the Bloom filter upon determining that the queue is no longer full.

Abstract: Techniques are provided for determining, by a coupon distributor, a value for a coupon of a product or service that will be provided by a coupon provider. The coupon provider provides, to the coupon distributor, one or both of a budget value that indicates an amount the coupon provider is willing to pay the coupon distributor for distributing the coupon, and a redemption rate that indicates one or more target redemption rates. The coupon provider uses a coupon value equation to calculate the coupon value based on a budget value and a redemption rate. The coupon provider might estimate that no coupon value will allow the coupon provider to stay within the budget and ensure that the actual redemption rate will be close to a particular redemption rate, which may or may not be specified by the coupon distributor.

Abstract: Systems and methods are described for link load balancing, by a multi-core intermediary device, a plurality of Internet links. The method may include load balancing, by a multi-core device intermediary to a plurality of devices and a plurality of Internet links, network traffic across the plurality of Internet links. The multi-core device providing persistence of network traffic to a selected Internet link based on a persistence type. A first core of the multi-core device receives, a packet to be transmitted via an Internet link to be selected from the plurality of Internet links. The first core sends to a second core of the multi-core device a request for persistence information responsive to identifying that the second core is an owner core of a session for persistence based on the persistence type.

Abstract: In one embodiment, an apparatus can include a policy vector module configured to retrieve a compressed policy vector based on a portion of a data packet received at a multi-stage switch. The apparatus can also include a decompression module configured to receive the compressed policy vector and configured to define a decompressed policy vector based on the compressed policy vector. The decompressed policy vector can define a combination of bit values associated with a policy.

Abstract: In one embodiment, an apparatus comprises a range selection module, a first stage of bloom filters, a second stage of bloom filters and a hashing module. The range selection module is configured to define a set of hash key vectors based on a set of range values associated with at least a portion of an address value from a data packet received at a multi-stage switch. The first stage of bloom filters and the second stage of bloom filters are collectively configured to determine that at least a portion of a hash key vector from the set of hash key vectors has a probability of being included in a hash table. The hashing module is configured to produce a hash value based on the hash key vector such that a first policy vector is selected based on the hash value and the first policy vector is decompressed to produce a second policy vector associated with the data packet.

Abstract: An example network device includes a control plane and a filter lookup module that includes a Bloom filter that supports parallel lookup of a maximum number of different prefix lengths. The filter lookup module accesses the Bloom filter to determine a longest length prefix that matches an entry in a set of prefixes. The control plane receives prefix lengths that include more than the maximum number of different prefix lengths supported by the Bloom filter, wherein the set of prefix lengths is associated with one application, generates, based on the received set of prefix lengths, two or more groups of different prefix lengths, wherein each of the two or more groups of different prefix lengths includes no more than the maximum number of different prefix lengths, and programs the filter lookup module with the two or more groups of different prefix lengths associated with the one application.

Abstract: An example network device includes a network interface configured to receive a packet of a packet flow, wherein the packet flow is one of a plurality of packet flows processed by the network device, a flow cache configured to receive a lookup key associated with the packet flow, and a Bloom filter configured to process the lookup key. The flow cache is further configured to store information about a portion of the plurality of packet flows processed by the network device, and determine whether to store information about the packet flow by at least applying a selection criterion to processing of the lookup key by the Bloom filter. The flow cache is configured to determine whether the lookup key is stored in the flow cache, and, when the lookup key is stored in the flow cache, retrieve a stored result associated with the lookup key and output the stored result.