Abstract: Various arrangements for performing secure domain name system (DNS) routing are presented. A secure signature may be generated using an internet protocol (IP) address of an authorized device. An encoded character string may be generated that comprises the IP address. The domain name server may receive a request for an IP address mapped to the hostname. The hostname may be validated using the secure signature. The IP address of the authorized device may be decoded from the encoded character string at least partially in response to the hostname being validated by the domain name server. The IP address decoded from the encoded character string may be transmitted at least partially based on the hostname being validated and the request for the IP address.

Abstract: Various systems, device and automated processes allow video streaming hosts or other server devices to publish their internal/local addresses (e.g., addresses used on a subnet or other local area network) to a backend address server operating on a wide area network (WAN) such as the Internet. Client devices attempting to subsequently contact server devices operating in the same local network can contact the address to obtain the internal address of the target server, thereby allowing direct LAN connections between clients and servers.

Abstract: Systems and methods for establishing secure remote connections to media devices establish a secure shell (SSH) connection between two machines which are located in two different private networks, such as between a remote debugging computer and a receiving device. The receiving device has a persistent outbound connection with a message server. The remote debugging computer connects to a relay manager and obtains a relay instance IP address and port. The relay manager then forwards the relay instance IP address and port to the receiving device via the message server. After receiving the connection request from the message server, the receiving device connects to the relay instance IP and port and waits for the input data. The remote debugging computer performs an SSH handshake and the receiving device directly authenticates the SSH connection.

Abstract: Various systems, device and automated processes allow video streaming hosts or other server devices to publish their internal/local addresses (e.g., addresses used on a subnet or other local area network) to a backend address server operating on a wide area network (WAN) such as the Internet. Client devices attempting to subsequently contact server devices operating in the same local network can contact the address to obtain the internal address of the target server, thereby allowing direct LAN connections between clients and servers.

Abstract: Various arrangements are presented for relaying a secure streaming media communication session. A media relay server system may receive from a streaming media client via the Internet a first request for the secure streaming media communication session. A secure streaming media communication session may be established between a private streaming media server and the media relay server system. The media relay server system may establish a Transmission Control Protocol (TCP) communication service between the media relay server system and the private streaming media server via the Internet. The media relay server system may route, via the Internet, encrypted media packets from the private streaming media server to the streaming media client without the encrypted media packets being decrypted by the media relay server system.

Abstract: Systems and methods for establishing secure remote connections to media devices establish a secure shell (SSH) connection between two machines which are located in two different private networks, such as between a remote debugging computer and a receiving device. The receiving device has a persistent outbound connection with a message server. The remote debugging computer connects to a relay manager and obtains a relay instance IP address and port. The relay manager then forwards the relay instance IP address and port to the receiving device via the message server. After receiving the connection request from the message server, the receiving device connects to the relay instance IP and port and waits for the input data. The remote debugging computer performs an SSH handshake and the receiving device directly authenticates the SSH connection.

Abstract: Methods and systems are provided for configuring static memory in a device by analyzing a set of functionalities of a first device based on at least one use case wherein the at least one use case are associated with configuring available static memory in processing at least one functionality of the first device; configuring at least a first profile composed of the first part for memory allocation of the available static memory to a first processor, and a second part for memory allocation of the available static memory to a second processor of the first device; selecting the first profile either automatically or via a graphical user interface (GUI) by identifying a set of performance characteristics related to the functionality, and implementing the memory allocation by the first profile in processing the at least one functionality in the use case by the first device.

Abstract: Client and server devices identify each other over a LAN or similar network through a series of unicasts. Rather than broadcasting a service announcement or discovery request as a broadcast or multicast, for example, a device instead transmits a series of unicast messages using a finite set of recipient network addresses and port numbers. Responses to the unicast messages can be collected and tracked to thereby allow subsequent communications to occur via unicasts with only the recognized addresses, with a multicast to only the recognized addresses, and/or otherwise as desired. By allowing the clients and servers to communicate with a finite set of unicast messages, a “broadcast” type message can be sent on the network without a need for router configuration. Moreover, unicasts can be sent using different protocols (e.g., TCP) than the subsequent traffic (e.g., UDP), thereby making discovery of compatible devices on the network more reliable.

Abstract: Novel techniques are described for lock-free sharing of a circular buffer. Embodiments can provide shared, lock-free, constant-bitrate access by multiple consumer systems to a live stream of audiovisual information being recorded to a circular buffer by a producer. For example, when a producer system writes a data stream to the circular buffer, the producer system records shared metadata. When a consumer system desires to begin reading from the shared buffer at a particular time, the shared metadata is used to compute a predicted write pointer location and corresponding dirty region around the write pointer at the desired read time. A read pointer of the consumer system can be set to avoid the dirty region, thereby permitting read access to a stable region of the circular buffer without relying on a buffer lock.

Abstract: Novel techniques are described for lock-free sharing of a circular buffer. Embodiments can provide shared, lock-free, constant-bitrate access by multiple consumer systems to a live stream of audiovisual information being recorded to a circular buffer by a producer. For example, when a producer system writes a data stream to the circular buffer, the producer system records shared metadata. When a consumer system desires to begin reading from the shared buffer at a particular time, the shared metadata is used to compute a predicted write pointer location and corresponding dirty region around the write pointer at the desired read time. A read pointer of the consumer system can be set to avoid the dirty region, thereby permitting read access to a stable region of the circular buffer without relying on a buffer lock.

Abstract: Novel techniques are described for lock-free sharing of a circular buffer. Embodiments can provide shared, lock-free, constant-bitrate access by multiple consumer systems to a live stream of audiovisual information being recorded to a circular buffer by a producer. For example, when a producer system writes a data stream to the circular buffer, the producer system records shared metadata. When a consumer system desires to begin reading from the shared buffer at a particular time, the shared metadata is used to compute a predicted write pointer location and corresponding dirty region around the write pointer at the desired read time. A read pointer of the consumer system can be set to avoid the dirty region, thereby permitting read access to a stable region of the circular buffer without relying on a buffer lock.

Abstract: Various systems, device and automated processes allow video streaming hosts or other server devices to publish their internal/local addresses (e.g., addresses used on a subnet or other local area network) to a backend address server operating on a wide area network (WAN) such as the Internet. Client devices attempting to subsequently contact server devices operating in the same local network can contact the address to obtain the internal address of the target server, thereby allowing direct LAN connections between clients and servers.

Abstract: Various arrangements for performing secure domain name system (DNS) routing are presented. A secure signature may be generated using an internet protocol (IP) address of an authorized device. An encoded character string may be generated that comprises the IP address. The domain name server may receive a request for an IP address mapped to the hostname. The hostname may be validated using the secure signature. The IP address of the authorized device may be decoded from the encoded character string at least partially in response to the hostname being validated by the domain name server. The IP address decoded from the encoded character string may be transmitted at least partially based on the hostname being validated and the request for the IP address.

Abstract: Various arrangements are presented for relaying a secure streaming media communication session. A media relay server system may receive from a streaming media client via the Internet a first request for the secure streaming media communication session. A secure streaming media communication session may be established between a private streaming media server and the media relay server system. The media relay server system may establish a Transmission Control Protocol (TCP) communication service between the media relay server system and the private streaming media server via the Internet. The media relay server system may route, via the Internet, encrypted media packets from the private streaming media server to the streaming media client without the encrypted media packets being decrypted by the media relay server system.

Abstract: Various systems, device and automated processes allow video streaming hosts or other server devices to publish their internal/local addresses (e.g., addresses used on a subnet or other local area network) to a backend address server operating on a wide area network (WAN) such as the Internet. Client devices attempting to subsequently contact server devices operating in the same local network can contact the address to obtain the internal address of the target server, thereby allowing direct LAN connections between clients and servers.

Abstract: Systems and methods for establishing secure remote connections to media devices establish a secure shell (SSH) connection between two machines which are located in two different private networks, such as between a remote debugging computer and a receiving device. The receiving device has a persistent outbound connection with a message server. The remote debugging computer connects to a relay manager and obtains a relay instance IP address and port. The relay manager then forwards the relay instance IP address and port to the receiving device via the message server. After receiving the connection request from the message server, the receiving device connects to the relay instance IP and port and waits for the input data. The remote debugging computer performs an SSH handshake and the receiving device directly authenticates the SSH connection.

Abstract: Systems and methods for remote debugging perform remote debugging of a receiving device, such as a set-top box or other connected media player, even when the receiving device is located behind a firewall. The receiving device has a persistent outbound connection with a message server. Since it is an outbound connection, it connects across firewall restrictions. A remote debug machine sends a message via the message server to the receiving device over a network. The message carries the command/operation to be executed by the receiving device. The receiving device, which receives the command, executes the command and sends the output of the command to a debug data upload server to which the remote debug machine has access.

Abstract: Various arrangements for performing secure domain name system (DNS) routing are presented. A secure signature may be generated using an internet protocol (IP) address of an authorized device. An encoded character string may be generated that comprises the IP address. The domain name server may receive a request for an IP address mapped to the hostname. The hostname may be validated using the secure signature. The IP address of the authorized device may be decoded from the encoded character string at least partially in response to the hostname being validated by the domain name server. The IP address decoded from the encoded character string may be transmitted at least partially based on the hostname being validated and the request for the IP address.

Abstract: Various arrangements are presented for relaying a secure streaming media communication session. A media relay server system may receive from a streaming media client via the Internet a first request for the secure streaming media communication session. A secure streaming media communication session may be established between a private streaming media server and the media relay server system. The media relay server system may establish a Transmission Control Protocol (TCP) communication service between the media relay server system and the private streaming media server via the Internet. The media relay server system may route, via the Internet, encrypted media packets from the private streaming media server to the streaming media client without the encrypted media packets being decrypted by the media relay server system.

Abstract: Server devices operating on the Internet or another wide area network (WAN) are able to locate client devices using address information obtained from a shared location. Client devices initially determine their own network address information and submit the determined information for a priori storage at the shared location on the WAN. Each server device, in turn, contacts a message service or the like to establish a persistent data connection that is maintained between the message service and the server device over time. After the client device stores its own address information, the client initiates contact with the server via the message service having the previously-established persistent connection. Upon receipt of the instruction from the message service, the server is able to retrieve the client's previously-stored address information from the WAN storage and use the information to establish a connection with the client.