Abstract: Techniques are described for providing secure communication of network traffic from specific applications operating on a client device to a server device using a network-layer virtual private network (VPN). For example, a module on a client device may intercept network traffic from an application executing on the client device. The module may then determine whether to send the application-layer data through a network-layer VPN tunnel from the client device to a gateway device. This network-layer VPN tunnel may be defined by a network address of a physical adapter of the client device and a network address of the VPN gateway. In other words, there may be no need for the interposition of a VPN proxy on the client device. The module makes this determination on an application-by-application basis. The client device then forwards the application-layer data through the VPN tunnel based on the determination.

Abstract: A system and method is provided for inserting an ascending or descending sequence of data records into a database table represented by a tree structure. A search is performed to locate a node of the tree that includes the insertion point for a record in the sequence. If the node must be divided to store the record, it is determined whether division of the node at the insertion point will prevent a subsequently received record in the sequence from being stored on the same node with other records in the sequence irrespective of the storage space available on that node. If so, the node division is performed so that a record that is not in the sequence but that is adjacent to the insertion point is maintained on the same node as the other records in the sequence.