Abstract: The disclosure generally pertains to the use of a set of dynamically modifiable rules for a computing and communications system. An example method of use involves a first computing device applying a first set of dynamically modifiable rules for operating upon data. The first computing device detects a data activity that violates the first set of dynamically modifiable rules and conveys to a second computing device a request to modify the first set of dynamically modifiable rules. The second computing device may have an authority to autonomously grant permission to modify the first set of dynamically modifiable rules without human intervention. The first computing device may receive from the second computing device, an approval to modify the first set of dynamically modifiable rules, and may start applying a second set of dynamically modifiable rules that is a modified version of the first set of dynamically modifiable rules.

Abstract: A VPN connection request is received from a user device. Two or more VPN servers are associated with a single entry Internet Protocol (IP) address. The two or more VPN servers includes a first VPN server and a second VPN server. The single entry IP address is transmitted to the user device. A secure VPN connection is established between the user device and the first VPN server using the single entry IP address. The secure VPN connection is switched to the second VPN server when the first VPN server becomes unavailable such that the secure VPN connection remains intact and the user device continues to communicate via the single entry IP address.

Abstract: A virtual private network (VPN) tunnel is established between a user device and a VPN gateway. The VPN gateway transmits first packets received from the user device to a first exit VPN server. A first subset of the first packets is transmitted by the first exit VPN server to a first target and a second subset of the first packets is transmitted by the first exit VPN server to a second target. A second exit VPN server that is different from the first exit VPN server is identified based on the first packets. Second packets are received by the VPN gateway from the user device. At least a subset of the second packets are transmitted to the second exit VPN server for forwarding to the second target.

Abstract: A method and system for a VPN setup in which one of the peers' outgoing traffic is dynamically rerouted to exit VPN servers based on infrastructure or user requirements without losing the initial connection state or leaking unencrypted network traffic is described. One exemplary embodiment describes a method for a client to change their routing to multiple server locations. Another exemplary embodiment describes a method for the entry VPN servers to reroute traffic based on strategic traffic analysis.

Abstract: A method in a first virtual private network (VPN) server associated with clustering a plurality of VPN servers in a clustered network, the method including receiving, from a VPN service provider (VSP) control infrastructure, VPN data associated with a user device having an established VPN connection with the clustered network; and communicating, utilizing key information, the VPN data with the user device during the established VPN connection. Various other aspects are contemplated.

Abstract: A method for configuring a protocol in a virtual private network (VPN) service environment, the method including receiving, from a user device, device information associated with operation of the user device during an established VPN connection; configuring, based at least in part on the device information, a given VPN protocol from among a plurality of VPN protocols for utilization during the established VPN connection; and transmitting, to the user device, information associated with the given VPN protocol to enable the user device and a VPN server to utilize the given VPN protocol during the established VPN connection. Various other aspects are contemplated.

Abstract: A method for configuring a protocol in a virtual private network (VPN) service environment, the method including receiving, from a user device, device information associated with operation of the user device during an established VPN connection; determining, based at least in part on the device information, a given VPN protocol from among a plurality of VPN protocols for utilization during the established VPN connection; and transmitting, to the user device, information associated with the given VPN protocol to enable the user device and a VPN server to utilize the given VPN protocol during the established VPN connection. Various other aspects are contemplated.

Abstract: Automatic network configuration includes obtaining, by a virtual private network service provider infrastructure system, ranking data for data transport pathways between the virtual private network service provider infrastructure system and an external system, wherein a respective data transport pathway from the data transport pathways includes a respective exit node in the virtual private network service provider infrastructure system in communication with a respective entry node in the external system, wherein obtaining the ranking data includes obtaining at least a portion of the ranking data by testing a service provided by the external system via the entry node, and allocating, by the virtual private network service provider infrastructure system, a data transport pathway from the data transport pathways to a communication session, wherein the data transport pathway is a highest-ranking data transport pathway in the ranking data.

Abstract: Automatic network configuration includes obtaining, by a service provider infrastructure system, ranking data for data transport pathways between the service provider infrastructure system and an external system, wherein a respective data transport pathway from the data transport pathways includes a respective exit node in the service provider infrastructure system in communication with a respective entry node in the external system, wherein obtaining the ranking data includes obtaining at least a portion of the ranking data by testing a service provided by the external system via the entry node, and allocating, by the service provider infrastructure system, a data transport pathway from the data transport pathways to a communication session, wherein the data transport pathway is a highest-ranking data transport pathway in the ranking data.

Abstract: Adaptive online services access control by a system access control monitor includes receiving a request, from a client device, to access a system feature, obtaining a previous access score corresponding to the request, determining whether the request is authentic or suspicious, determining a current access score for the request as a sum of the previous access score and an activity modifier value, obtaining an access threshold value for the system feature, determining whether to deny, hold, or grant the request based on a comparison of the current access score and the access threshold value.

Abstract: A computer generates a first encrypted message by encrypting an unencrypted message for decryption at a receiving device. The computer couples the first encrypted message with addressing data associated with the receiving device to generate a coupled message. The computer generates a second encrypted message by encrypting the coupled message for decryption at a data transmission service. The computer transmits the second encrypted message via the data transmission service to enable the receiving device to read the unencrypted message.

Abstract: A computer generates a first encrypted message by encrypting an unencrypted message for decryption at a receiving device. The computer couples the first encrypted message with addressing data associated with the receiving device to generate a coupled message. The computer generates a second encrypted message by encrypting the coupled message for decryption at a data transmission service. The computer transmits the second encrypted message via the data transmission service to enable the receiving device to read the unencrypted message.

Abstract: A computer generates a first encrypted message by encrypting an unencrypted message for decryption at a receiving device. The computer couples the first encrypted message with addressing data associated with the receiving device to generate a coupled message. The computer generates a second encrypted message by encrypting the coupled message for decryption at a data transmission service. The computer transmits the second encrypted message via the data transmission service to enable the receiving device to read the unencrypted message.

Abstract: A method for configuring a protocol in a virtual private network (VPN) service environment, the method including receiving, from a user device, device information associated with operation of the user device during an established VPN connection; configuring, based at least in part on the device information, a given VPN protocol from among a plurality of VPN protocols for utilization during the established VPN connection; and transmitting, to the user device, information associated with the given VPN protocol to enable the user device and a VPN server to utilize the given VPN protocol during the established VPN connection. Various other aspects are contemplated.

Abstract: A method for configuring a protocol in a virtual private network (VPN) service environment, the method including receiving, from a user device, device information associated with operation of the user device during an established VPN connection; determining, based at least in part on the device information, a given VPN protocol from among a plurality of VPN protocols for utilization during the established VPN connection; and transmitting, to the user device, information associated with the given VPN protocol to enable the user device and a VPN server to utilize the given VPN protocol during the established VPN connection. Various other aspects are contemplated.

Abstract: A method including transmitting, by a user device to an infrastructure device prior to establishing a virtual private network (VPN) connection with a VPN server, service information indicating one or more VPN services to be received by the user device after establishing the VPN connection with the VPN server; receiving, by the user device from the infrastructure device, information associated with the VPN server that is selected by the infrastructure device to provide the one or more VPN services to the user device based at least in part on the service information; and establishing, by the user device based at least in part on utilizing the information associated with the VPN server, the VPN connection with the VPN server to receive the one or more VPN services is disclosed. Various other aspects are contemplated.

Abstract: A method in a first virtual private network (VPN) server associated with clustering a plurality of VPN servers in a clustered network, the method including receiving, from a VPN service provider (VSP) control infrastructure, VPN data associated with a user device having an established VPN connection with the clustered network; and communicating, utilizing key information, the VPN data with the user device during the established VPN connection. Various other aspects are contemplated.

Abstract: A method in a virtual private network (VPN) service environment, the method including measuring, during a given interval of time, respective durations of time associated with performing a plurality of processes for configuring VPN connections; calculating average respective durations of time based at least in part on the measured respective durations of time; configuring a progress indicator to indicate a total duration of time associated with configuring a VPN connection for a user device, the total duration of time being substantially equal to a sum of the average respective durations of time; and transmitting, to the user device, information associated with the progress indicator to enable display of the progress indicator on a screen associated with the user device. Various other aspects are contemplated.

Abstract: A method and system for a VPN setup in which one of the peers' outgoing traffic is dynamically rerouted to exit VPN servers based on infrastructure or user requirements without losing the initial connection state or leaking unencrypted network traffic is described. One exemplary embodiment describes a method for a client to change their routing to multiple server locations. Another exemplary embodiment describes a method for the entry VPN servers to reroute traffic based on strategic traffic analysis.

Abstract: A method for optimized server picking in a virtual private network (VPN), the method comprising enabling reception of service information via a local input interface, the service information indicating one or more VPN services to be received during an established VPN connection; and enabling transmission of the service information in association with transmission of a connection request to a VPN service provider. Various other aspects are contemplated.