Abstract: Aspects of the disclosure relate to accessing and interacting with requested web content using a modified web farm framework. A computing platform may receive a consumer request to connect to a virtual workspace. The computing platform may parse the consumer request to identify a cookie that contains server connections details associated with the virtual workspace. The computing platform may transmit the cookie to the consumer and may receive, from the consumer, a request to connect to a pod and a server that host the virtual workspace. The computing platform may monitor a server connection between the consumer and the virtual workspace to determine whether the server connection was lost and/or terminated. Based on determining the server connection was lost and/or terminated, the computing platform may transmit a notification to the consumer indicating the same. The computing platform may receive, from the consumer, a request to initiate a server re-connection loop.

Abstract: A system and method for multi-channel communications that includes receiving an initiating communication triggering establishment of a conversation associated with a set of participant endpoints, wherein the set of participant endpoints comprises of participant endpoints from at least two distinct communication channels; configuring a set of intermediary endpoints for communications between at least a subset of the set of participant endpoints on different communication channels; and for each communication of the conversation, transmitting communications to a receiving set of participant endpoints through the configured intermediary endpoint.

Abstract: A pseudo-active/active firewall configuration handles firewall switchover events without traffic disruption. A passive firewall is set to an active state, and an active firewall is switched to a pseudo-active state wherein it continues to process ingress and egress traffic according to traffic handling protocols for its active state. An Internet protocol address binding linking the now pseudo-active firewall to an Internet gateway that forwards traffic to the firewalls is updated in a network address translation (NAT) table to route traffic to the newly active firewall. Once a pseudo-active timer expires and the binding is successfully updated to route traffic to the newly active firewall, the pseudo-active firewall is set to a passive state.

Abstract: A computing system may include a server, and a client computing device in communication with the server. The server may be configured to provide a corresponding virtual desktop instance for the client computing device. The computing system may include a local device to be coupled to a given client computing device and to be operable in a given virtual desktop instance associated with the given client computing device, thereby generating client initialization packets. The server may be configured to generate a server mapping table. The given client computing device may be configured to generate a client mapping table, replace a client packet with a client mapping ID number to define compressed client initialization packets, and send the compressed client initialization packets to the server. The server may be configured to replace the client mapping ID number with the client packet in the compressed client initialization packets based upon the server mapping table.

Abstract: Certain aspects of the disclosure are directed to customization of alerts using telecommunications services. A data-communications server is configured to a set of virtual office features including client-specific call routing functions available to remotely-situated client entities based on a subscription. The server is configured to provide to the client entities, a set of instructions written in a first programming language, and to receive from each respective client entity, client-specific sets of control data written in a second programming language. The client-specific sets of control data may specify particular alerts, informational data and/or reminders to be provided to end-users of the respective client entity.

Abstract: Example implementations relate to passing a cookie between client devices such that, based on the cookie, connections to the application from the client devices are mapped to a given application instance. A request may be transmitted to an application instance connector to connect to an application. The application may be implemented by multiple application instances. A cookie associated with a given application instance of the multiple application instances may be received from the application instance connector. The cookie may cause connections to the application from client devices having the cookie to map to the given application instance. The cookie may be passed from a first client device to a second client device such that, based on the cookie, connections to the application from the second client device are routed to the given application instance.

Abstract: A server interacts with a bot detection service to provide bot detection as a requesting client interacts with the server. In an asynchronous mode, the server injects into a page a data collection script configured to record interactions at the requesting client, to collect sensor data about the interactions, and to send the collected sensor data to the server. After the client receives the page, the sensor data is collected and forwarded to the server through a series of posts. The server forwards the posts to the detection service. During this data collection, the server also may receive a request from the client for a protected endpoint. When this occurs, and in a synchronous mode, the server issues a query to the detection service to obtain a threat score based in part on the collected sensor data that has been received and forwarded by the server. Based on the threat score returned, the server then determines whether the request for the endpoint should be forwarded onward for handling.

Abstract: An authoritative DNS server receives DNS requests for domains. The authoritative DNS server responds to the requests with address records that include IP addresses that are selected from a larger pool of IP addresses, where a first response to a DNS query for a domain can include IP addresses different from IP addresses included in a second response for the same domain. Also, the same IP addresses may be returned for a first domain and a different, second domain. The authoritative DNS server may randomly select the IP addresses to include in responses to the requests regardless of the domain.

Abstract: According to one embodiment, a method, computer system, and computer program product for web conference recording correction is provided. The embodiment may include capturing a server-side recording of a web conference and a plurality of client-side recordings of the web conference. The embodiment may also include identifying one or more quality issues with the server-side recording. The embodiment may further include generating a reconstruction of the server-side recording that cures the one or more quality issues using one or more recordings within the plurality of client-side recordings.

Abstract: Techniques for delivering a distributed network security service providing isolation of customer data are described. One example method includes configuring a first node to participate in a node cluster, wherein the first node is hosted by a first cloud service provider, and wherein participating in the node cluster includes performing one or more processing actions specific to the node cluster on data received by the node; configuring a second node to participate in the node cluster, the second node hosted by a second cloud service provider; receiving a status indication from the first node over a network; determining a synchronization mechanism for the first node based on a network configuration of the first node, wherein the determined synchronization mechanism is configured to allow the first node to acquire synchronization data from other nodes in the node cluster; and transmitting the synchronization mechanism to the first node over the network.

Abstract: A first compute server of a distributed cloud computing network receives a request from a first client device for an object to be handled by an object worker that includes a single instantiation of a piece of code that solely controls reading and writing access to the first object. A determination is made that the object worker is instantiated for the object and is currently running in the first compute server, and the piece of code processes the first request. The first compute server receives a message to be processed by the first object worker from a second compute server. The message includes a second request for the object from a second client device connected to the second compute server. The piece of code processes the message and transmits a reply to the second compute server.

Abstract: A sequence recovery method executed by a node in a time-sensitive network, the method comprising receiving a packet having a sequence number, determining whether the sequence number is within a predetermined range of a reference sequence number, wherein the reference sequence number is a current latest sequence number accepted by the node, and wherein the predetermined range comprises a history range and a future range, wherein the history range has a length equal to a history length and includes the reference sequence number and a predetermined number of consecutive sequence numbers that are immediately earlier than the reference sequence number, and the future range has a length equal to a future length and defines a predetermined number of consecutive sequence numbers that are immediately later than the reference sequence number, wherein the future length is greater than the history length.

Abstract: An electronic device includes a memory; a first processor; a second processor for which power consumption is lower than power consumption of the first processor; a communicator that communicates with an external device; and a switch that switches a connection destination of the communicator to the first processor or the second processor. The second processor is configured to, in a case in which a condition for transitioning to a power suppression state that is an operating state in which power consumption is suppressed is satisfied, connect the communicator by the switch. The first processor is configured to, in a case in which a condition for transitioning to a normal state that is a normal operating state is satisfied, connect the communicator by the switch.

Abstract: A system is provided that executes artificial intelligence for unstructured data. A memory coupled to a processor that executes instructions for: a first engine using artificial intelligence (AI) to create a structured event or scraped structured event records from unstructured and semi-structured log messages; an extraction engine in communication with a managed infrastructure and the first engine, the extraction engine configured to receive managed infrastructure data; and a signaliser engine that includes one or more of a NMF engine, a k-means clustering engine and a topology proximity engine, the signaliser engine inputting a list of devices and a list a connection between components or nodes in the managed infrastructure, the signaliser engine determining one or more common characteristics and produces one or more clusters of events.

Abstract: Systems and methods are provided for determining an access request provided by an entity that seeks to interact with one or more backend systems through a middleware system, the access request including a genuine access token. The entity can be authenticated based on the genuine access token. When a client request is made to the middleware system with a genuine access token, the request can be made through a smart ingress and egress proxy which intercepts the request and replaces the genuine access token with an invalid access token. The middleware system can subsequently make authorized requests to downstream systems on behalf of the middleware system's client by treating the smart proxy as an egress proxy for those subsequent requests, and the smart proxy replaces the invalid access token with a genuine one.

Abstract: A novel method for dynamic network service allocation that maps generic services into specific configurations of service resources in a network is provided. An application that is assigned to be performed by computing resources in the network is associated with a set of generic services, and the method maps the set of generic services to the service resources based on the assignment of the application to the computing resources. The mapping of generic services is further based on a level of service that is chosen for the application, where the set of generic services are mapped to different sets of network resources according to different levels of services.

Abstract: A computing device's performance can be dynamically tuned for a containerized application. A dynamic tuning solution can be configured to identify target applications that are running in workspaces implemented using containers, including when a target application is moved between workspaces and when a workspace's context is changed. The dynamic tuning solution can create mappings between identifiers of the container and a performance level associated with the target applications. A driver can then use these mappings to ensure that the computing device is dynamically tuned to the performance level associated with the target application when the container hosting the target application is active. The dynamic tuning solution can also reconcile discrepancies between a performance level associated with a target application and a performance level associated with a workspace in which the target application is containerized.

Abstract: User interfaces may enable users to initiate voice-communications with voice-controlled devices via a Wi-Fi network or other network via an Internet Protocol (IP) address. The user interfaces may include controls to enable users to initiate voice communications, such as Voice over Internet Protocol (VoIP) calls, with devices that do not have connectivity with traditional mobile telephone networks, such as traditional circuit transmissions of a Public Switched Telephone Network (PSTN). For example, the user interface may enable initiating a voice communication with a voice-controlled device that includes network connectivity via a home Wi-Fi network. The user interfaces may indicate availability of devices and/or contacts for voice communications and/or recent activity of devices or contact.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprising an analytic server, which automatically detects malicious electronic files. The analytic server receives electronic files, runs a file extraction module to recursively scan the electronic files, and extracts all of the embedded and linked electronic files. The analytic server runs an exploit scanner against the extracted electronic files, and extracts code included in the electronic files. The analytic server deobfuscates the extracted code and examines the deobfuscated code by applying a set of malicious behavior rules against the deobfuscated rules. The analytic server identifies potentially malicious electronic files based on the examination. The analytic server applies a set of whitelist rules on the potentially malicious electronic files to eliminate false alarms. The analytic server transmits alert notifications to an analyst regarding the malicious electronic files and updates the whitelist rules based on analyst's feedback.

Abstract: An autonomous vehicle is provided that includes one or more processors configured to provide a local compute manager to manage execution of compute workloads associated with the autonomous vehicle. The local compute manager can perform various compute operations, including receiving offload of compute operations from to other compute nodes and offloading compute operations to other compute notes, where the other compute nodes can be other autonomous vehicles. The local compute manager can also facilitate autonomous navigation functionality.

Abstract: Methods, systems and computer readable media for secure VLAN within a wireless network are described.

Abstract: Arrangements for controlling data retrieval are provided. In some aspects, a data request may be received by a computing platform. A pre-fetch engine may be executed to analyze the data request and generate, using a machine learning model, a pre-fetch template identifying data sets responsive to the request. The pre-fetch template may be transmitted to one or more data repositories and response data sets may be received. The response data sets may be generated by a data controller associated with a respective data repository. The data controller may identify data sets and evaluate the date sets to determine whether they meet local requirements of the geographic location of the data repository. The received data sets may be analyzed to identify missing data sets. If missing data sets are identified, the data may be processed by ignoring the missing data sets or inserting a substitute value for the missing data sets.

Abstract: An outdoor device of a timing system includes a receiver for receiving clock information from a satellite system, a processing system for running master functionality of a clock synchronization protocol to transfer the clock information to an indoor device of the timing system, and a transceiver for transferring data between the outdoor device and the indoor device. A memory device stores a fixed delay value estimating a time delay from a reception moment of a request message related to the clock synchronization protocol to a transmission moment of a reply message. There is no need to compute a difference between clock times corresponding to the reception moment and the transmission moment because the fixed delay value is used in lieu of the difference in the clock synchronization protocol. Thus, quality requirements related to an oscillator of the outdoor device can be mitigated.

Abstract: Traffic is processed in a virtualised environment comprising: (i) a physical underlay network; (ii) a first overlay network (an overlay of the physical underlay network and associated with a first set of network addresses, IP1); (iii) a second overlay network (an overlay of the first overlay network and associated with a second set of network addresses, IP2); and (iv) virtualised applications each having an execution environment and being associated with at least one network address in each of the first and second sets of network addresses, IP1 and IP2. In the execution environment of a first virtualised application: (i) traffic communicated from the first virtualised application to the first overlay network is encapsulated; and/or (ii) traffic communicated from the first overlay network to the first virtualised application is decapsulated. Tenant separation processing is performed outside the execution environments of the virtualised applications.

Abstract: An approach is proposed to support Internet traffic inspection to detect and prevent access to blocked websites or resources. First, access requests initiated by users to websites hosted on servers over a network are intercepted by an inspection agent, which identifies and caches a pair of the domain/host name of each website and its corresponding IP address on the Internet to a localized DNS cache. When a newly intercepted access request identifies the website by its IP address only without specifying its domain/host name, the inspection agent looks up the domain name by its IP address from the DNS cache. If no domain name is found, the inspection agent redirects the access request to a proxy server instead of forwarding it to the server hosting the website for further inspection. The proxy server then inspects the IP address to determine if it is a legitimate website or not.

Abstract: Methods, devices, and systems are disclosed for an M2M Interest Function. An M2M Interest Function may receive requests from users to publish the users' personal interests in particular data identify relationships and patterns in the data. Associated data may then be stored in a single best location for such data based on various criteria rather than on separate M2M Gateways or M2M Servers. This location may be provided to users interested in such data. Relationship and association data may be provided to M2M gateways.

Abstract: Classification predictions made by a concept classifier may be interactively visualized and explored in a user interface that displays visual representations of a plurality of data items in a star coordinate space spanned by a plurality of anchor concepts each mapping the data items onto respective finite real-valued scores. Positions of the visual representations of the data items in the star coordinate space are based on the scores for the plurality of anchor concepts, and may be updated responsive to a user manipulating the anchor concepts in the user interface, e.g., by moving or modifying definitions of anchor concepts, or by adding or deleting anchor concepts. The visual representations of the data items may reflect labels and/or classification predictions, and may be updated based on updated classification predictions following retraining the of the concept classifier based on added training data or new features.

Abstract: Systems, apparatuses, and methods are described for establishing, or re-establishing, trust for a network device. A user device may send, via a network device, a service request to establish trust for the network device in a network. The service request may comprise, or may allow look up of, identifying information for the network device, such as a network address. Trust of the network device may be established, at least in part, by confirming the network address (or other identifying information) associated with the network device, and/or by confirming certain devices that are in communication with the network device. An authentication token may be sent to the network device for reconnecting to the network.

Abstract: Methods and apparatus to exclude network communication traffic from media monitoring records are disclosed herein. An example apparatus includes a first communication radio to collect records of network traffic on a communication network and a second communication radio to transmit the records identifying a portion of the network traffic to an audience measurement entity. The example apparatus further includes a MAC address determiner to determine the MAC address of the second communication radio and a record filter to remove the network communication associated with the MAC address from the records.

Abstract: A communication system (1) includes a terminal information acquisition unit configured to acquire version information of an OS of a terminal (10), a comparison unit configured to compare a version of the OS of the terminal (10) acquired by the terminal information acquisition unit with a latest version of the corresponding OS, and a setting unit configured to set, when the version of the OS of the terminal (10) is not the latest version, a path along which traffic of the terminal (10) passes through a security appliance (5), and set, when the version of the OS of the terminal (10) is the latest version, a path along which the traffic of the terminal (10) does not pass through the security appliance (5).

Abstract: Techniques for conversation recovery in a dialog management system are described. A system may determine, using dialog models, that a predicted action to be performed by a skill component is likely to result in an undesired response or that the skill component is unable to respond to a user input of a dialog session. Rather than informing the user that the skill component is unable to respond, the system may send data to the skill component to enable the skill component to determine a correct action responsive to the user input. The data may include an indication of the predicted action and/or entity data corresponding to the user input. The system may receive, from the skill component, response data corresponding to the user input, and may use the response data to update a dialog context for the dialog session and an inference engine of the dialog management system.

Abstract: A method, comprising: receiving a plurality of first response times, each of the plurality of first response times corresponding to a different one of a plurality of first network paths between a first host device and the first storage array, the plurality of first response times being received from the first host device; receiving a plurality of second response times, each of the plurality of second response times corresponding to a different one of a plurality of second network paths between a second host device and the first storage array, the plurality of second response times being received from the second host device; and processing the plurality of first response times and the plurality of second response times, wherein the plurality of first network paths and the plurality of second network paths are part of a communications network.

Abstract: Systems, methods, and other embodiments associated with branch prediction in workflows are described. In one embodiment, a method includes inputting a workflow and serially progressing through the workflow in a flow sequence and in response to the flow sequence encountering a first decision element in the workflow that includes a plurality of branch paths: (i) executing a prediction that predicts a resulting path of the first decision element to predict a first user interface from the plurality of user interfaces that may be encountered subsequently in the flow sequence as part of a first terminal element; and (ii) pre-building the first user interface that is predicted prior to encountering the first terminal element. In response to the flow sequence reaching the first terminal element, displaying the pre-built first user interface on a display device.

Abstract: Various embodiments of systems and methods for faster restart of task nodes using periodic checkpointing for data sources are described. A task node obtains data from data sources in order to perform one or more tasks. The task node checkpoints data source progress points for each of its data sources, whether active or inactive, into a common checkpoint data structure at least once every time interval. Multiple task nodes checkpoint their data source progress points into the same common checkpoint data structure. After restart, the task node determines where to resume obtaining data from its data sources by determining a limited portion of the common checkpoint data structure based on the time interval, analyzing only the limited portion of the common checkpoint data structure, retrieving the data source progress points for each of its data sources, and resuming obtaining data from the data sources to perform tasks.

Abstract: Provided is a method for transmitting data packets over a network from a sender to a receiver via a communication link consisting of at least one transmission section, via which the data packet is transmitted from a sender node to a receiver node, the method having the following steps for at least one transmission section: first security information, which includes information about a cryptographic protective function used in the transmission of the data packet via an adjacent transmission section, is assigned to the data packet by the sender node, the data packet having the assigned security information is transmitted to the receiver node of the transmission section, the security information is checked in the receiver node against a preset guideline, and at least one measure is provided in accordance with the result of the check.

Abstract: A network security platform (NSP) device and interaction method are disclosed. The interaction method provides network packet analysis for secure transmission protocols using ephemeral keys or keys that are negotiated dynamically. The NSP may be part of an Intrusion Protection System, or firewall. The disclosed approach does not use man-in-the-middle proxy. Instead, it includes monitoring connections ends: client and/or server, to intercept the required data or negotiated (or changed) encryption keys. Decrypted data may be sent to an NSP sensor in a secure manner for analysis. Alternatively, intercepted keys used for the encrypt/decrypt operations may be sent to an NSP sensor in a secure manner every time they are changed. The NSP sensor may then use the obtained keys to decrypt traffic prior to providing it to the inspection engines. Embodiments focused on inbound traffic to a web server may coordinate between a web server and an NSP.

Abstract: This application provides a subflow establishment method. A local-end device obtains an identifier of an operator currently accessed by a network interface card of the local end device. The local-end device obtains a plurality of IP addresses of a peer-end device and identifiers of operators to which the plurality of IP addresses are homed; and establishes, by matching a plurality of operators corresponding to the local-end device and the plurality of operators corresponding to the peer-end device, a subflow between an IP address pair homed to a same operator. In this way, the established subflow does not cross operators as far as possible. This reduces negative impact of cross-operator communication of some subflows on transmission performance of a multipath connection, thereby better leveraging an advantage of the multipath connection in transmission performance in comparison with a single-path connection.

Abstract: Network service providers are managed using a server-side configuration approach. According to one of various examples, a host network location includes two or more servers that automatically reconfigure their services in response to controller service settings corresponding to each server. Each server reads configuration information provided at a controller such as a domain name server (DNS), and in response, runs a network-based service corresponding to the configuration information.

Abstract: Embodiments of the present application disclose a file directory traversal method, apparatus, device, and medium, and relate to the field of file system processing technology and cloud computing. The method may include: receiving a current directory traversal request of a terminal for a target directory; determining a directory calling identifier of the terminal by parsing the current directory traversal request; wherein, the directory calling identifier is used for uniquely representing the terminal under the target directory; determining a directory entry currently requested to be called by the terminal under the target directory, according to the current directory traversal request; and sending the determined directory entry to the terminal in accordance with the directory calling identifier.

Abstract: This application discloses a communication method and a communications apparatus. The method includes: receiving, by a mobility management network element, a registration request message from a terminal, where the registration request message is used to request a vehicle-to-everything V2X configuration parameter for the terminal, and the V2X configuration parameter is used by the terminal to perform a V2X service; sending, by the mobility management network element, a parameter request message to a V2X parameter configuration network element based on the registration request message, where the parameter request message is used to request the V2X configuration parameter of the terminal from the V2X parameter configuration network element; and receiving, by the mobility management network element, the V2X configuration parameter from the V2X parameter configuration network element, and sending the V2X configuration parameter to the terminal. Use of this application helps improve security of the V2X service.

Abstract: According to various example embodiment of the present disclosure, a method of sharing item information by an electronic apparatus includes acquiring a request for link information related to at least one item from a user, acquiring first selection information related to an attribute of the link information, and providing link information on a first page including information related to the at least one item based on the request for the link information and the first selection information, in which the link information may include information related to the attribute.

Abstract: A user having multiple electronic devices may receive notifications at each of the devices. When it is determined that a first device is in an active state and that a notification has been viewed on that device, an indication that the notification has been viewed may be communicated by the first device to a synchronization server. It may then be determined whether the viewed notification is also present on one or more of the user's other devices. Based on the determination, an indication that the notification has been viewed may be sent from the synchronization server to each of the user's devices on which the notification is present. Upon receipt of the indication from the synchronization server, the viewed notification may be removed from each of the devices, thereby avoiding a redundant display of the notification on multiple devices.

Abstract: Disclosed are systems, apparatuses and techniques for replicating data between different cloud computing platforms. Examples include storage replicator components operable in different cloud computing platforms. The first storage replicator component may identify the second cloud computing platform as a location to copy a data file in response to an event related to the data file stored in a first cloud computing platform. The first storage replicator component may request a copy of the data file via an application programming interface of the first cloud computing platform. The attributes of the copy of the data file which involve modification to conform to data management conventions of the second cloud computing platform may be determined and modified to comply with conventions of the second cloud computing platform. The modified copy of the data file may be forwarded to the second cloud computing platform for storage.

Abstract: A device may include a controller and a modem of a first wireless network. The controller may determine that the modem is in active mode and the device is using a second wireless network for communication instead of the first wireless network. In response to the determining, the controller may switch the modem into power-save mode. In response to a handover triggering event, the controller may switch the modem to the active mode and acquire a service of the first wireless network without registering with the first wireless network. The controller may determine that a communication service is to be handed over to the service of the first wireless network. In response to determining that the communication service is to be handed over, the controller may perform registration with the first wireless network, and perform handover of the communication service to the service of the first wireless network.

Abstract: A real-time process for establishing and reestablishing virtual reality (VR) sessions between automated agent and a customer with customer VR equipment without losing session context after a connection loss is disclosed. VR sessions are dynamically created/recreated using artificial intelligence/machine learning (AI/ML) for engaging virtual agents and customers. Real-time capturing and processing of the VR interaction is captured for session context and stored via blockchain ledgers for secure tracking. VR session connectivity is monitored in real-time. If any anomaly or interruption occurs, retry notifications are sent to establish a second session. Prior session context is used for the second VR session to allow the virtual agent and customer interaction to continue without loss of context.

Abstract: A system for flexible and scalable automated end-to-end chat-based contact center testing, having a test case management platform, a chat cruncher, a contact center manager, a chat classifier, a desktop automation engine, and headless browser-based virtual agents and customers. The test case management platform allows a user to configure operation of the system. The chat cruncher operates a plurality of virtual customers. The contact center manager operates a plurality of virtual agents to participate in chat session with virtual customers.

Abstract: Some embodiments provide a method that, at a first domain name system (DNS) cluster of a set of DNS clusters, receives a DNS request from a client. The first DNS cluster identifies, based on an identifier of the client in the DNS request, a home DNS cluster of the client. The method forwards the DNS request to the home DNS cluster. The home DNS cluster supplies a DNS response to the client. Identifying the home DNS cluster, in some embodiments, includes performing a hash on the identifier of the client. Supplying the DNS response, in some embodiments, includes receiving a virtual IP (VIP) address associated with one of a plurality of sets of application servers to the client and providing the received VIP address to the client in the DNS response.

Abstract: A dialysis system, comprising: a dialysis machine; a voice recognition component configured to identify a voice command in audio information received by a microphone of the dialysis system; an authentication component configured to determine a source of the voice command; and a processor configured to perform a function determined based on the voice command.

Abstract: Some embodiments of the invention provide a method for network-aware load balancing for data messages traversing a software-defined wide area network (SD-WAN) (e.g., a virtual network) including multiple connection links between different elements of the SD-WAN. The method includes receiving, at a load balancer in a multi-machine site, link state data relating to a set of SD-WAN datapaths including connection links of the multiple connection links. The load balancer, in some embodiments, provides load balancing for data messages sent from a machine in the multi-machine site to a set of destination machines (e.g., web servers, database servers, etc.) connected to the load balancer over the set of SD-WAN datapaths. The load balancer selects, for the data message, a particular destination machine (e.g., a frontend machine for a set of backend servers) in the set of destination machines by performing a load balancing operation based on the received link state data.

Abstract: A parametric constant resolves to different values in different contexts, but a single value within a particular context. An anchor constant is a parametric constant that allows for a degree of parametricity for an API point. The context for the anchor constant is provided by a caller to the API point. The anchor constant resolves to an anchor value that records specialization decisions for the API point within the provided context. Specialization decisions may include type restrictions, memory layout, and/or memory size. The anchor value together with an unspecialized type of the API point result in a specialized type of the API point. A class object representing the specialized type is created. The class object may be accessible to the caller, but the full value of the anchor value is not accessible to the caller. The API point is executed based on the specialization decisions embodied in the anchor value.