Abstract: Techniques for conditional name resolution and configuration are provided. Calls made by applications to resolve hostnames through name resolution services are intercepted and processed unbeknownst to the applications. The calls are inspected for hostnames and the hostnames are lookup in a policy store for IP addresses. The IP addresses are supplied back to the applications as if IP addresses were provided by the name resolution services.

Abstract: Apparatus, systems, and methods may operate to receive requests to securely process files on an untrusted client. Additional activity may include transparently redirecting file management operations associated with applications running on the untrusted client to file content associated with the files, where the file content is located in a sandbox on the untrusted client, where the sandbox is inaccessible to the applications. A data store, shared across the applications, may be used to share information associated with the file content. Additional apparatus, systems, and methods are disclosed.

Abstract: Techniques for high availability of virtual private networks (VPN's) are provided. VPN gateways are organized as a virtual ring of VPN gateways. A client seeking to establish VPN communications with a destination resource is assigned one of the VPN gateways as a primary gateway and one VPN gateway as a secondary gateway. When a client's primary fails, the client seamless transitions to its designated secondary and the VPN gateways reconfigure themselves to account for the primary's failure.

Abstract: Techniques for conditional name resolution and configuration are provided. Calls made by applications to resolve hostnames through name resolution services are intercepted and processed unbeknownst to the applications. The calls are inspected for hostnames and the hostnames are lookup in a policy store for IP addresses. The IP addresses are supplied back to the applications as if IP addresses were provided by the name resolution services.

Abstract: Apparatus, systems, and methods may operate to receive requests to securely process files on an untrusted client. Additional activity may include transparently redirecting file management operations associated with applications running on the untrusted client to file content associated with the files, where the file content is located in a sandbox on the untrusted client, where the sandbox is inaccessible to the applications. A data store, shared across the applications, may be used to share information associated with the file content. Additional apparatus, systems, and methods are disclosed.

Abstract: Techniques for high availability of virtual private networks (VPN's) are provided. VPN gateways are organized as a virtual ring of VPN gateways. A client seeking to establish VPN communications with a destination resource is assigned one of the VPN gateways as a primary gateway and one VPN gateway as a secondary gateway. When a client's primary fails, the client seamless transitions to its designated secondary and the VPN gateways reconfigure themselves to account for the primary's failure.

Abstract: Techniques for policy based virtual private network (VPN) communications are provided. A principal uses a client device to establish a VPN session with a remote processing environment. At the remote processing environment, policies are evaluated and are used for modifying permissible VPN routes that the client uses on behalf of the principal during the VPN session. The modified VPN routes are dynamically pushed to the client at the start of the VPN session and dynamically enforced by the client with communications, which are initiated by the principal during the VPN session.