Abstract: An adaptive congestion control device (“ACCD”) may dynamically optimize network congestion control for different active flows. The ACCD may initiate a first flow that is associated with a first set of flow parameters, may select a first congestion control algorithm from a plurality of congestion control algorithms based on the first set of parameters, and may control transmission of packets for the first flow according to the first congestion control algorithm. While the first flow is active, the ACCD may initiate a second flow that is associated with a different second set of flow parameters, may select a different second congestion control algorithm from the plurality of available congestion control algorithms based on the second set of parameters, and may control transmission of packets for the second flow according to the second congestion control algorithm.

Abstract: Provided is a controller for dynamically balancing load between different servers using different thresholds that are continually modified for each of the servers. The controller may generate a baseline load measure based on load measures received from the different servers, and may configure a first threshold for a first server and a second threshold for a second server based on the load measure at the first server deviating from the baseline load measure by a first amount that is greater than a second amount by which the load measure at the second server deviates from the baseline load measure. The controller may allocate an additional server to distribute first content with the first server in response to first content load at the first server satisfying the first threshold and the same load or a greater load of second content at the second server not satisfying the second threshold.

Abstract: Dynamic caching policies and/or dynamic purging policies are provided for modifying the entry and eviction of content to the cache (e.g., storage and/or memory) of a caching server based on the current and past cache performance and/or demand. The caching server may modify or replace a configured policy when cache performance is below one or more thresholds. Modifying the caching policy may change caching behavior of the caching server by changing the conditions that control the content that is entered into cache or the content that is deferred and not entered into cache after a request. This may include assigning different probabilities for entering the same content into cache based on different caching policies. Modifying the purging policy may change eviction behavior of the caching server by changing the conditions that control the cached content that is selected and removed from cache.

Abstract: A network firewall detects and protects against persistent low volume attacks based on a sequence of network data having a pattern that matches by some threshold or percentage a sequence of network data from an earlier iteration of the same persistent low volume attack. The attack patterns are derived from tokenizing one or more elements from a captured sequence of network data that is representative of an attack iteration. Counts for different resulting tokens may be stored in a feature vector that represents the attack pattern. If subsequent sequences of network data have a sufficient number of similar token, a pattern match can be identified and the firewall can take protective action including blacklisting the sending clients, blocking the traffic, redirecting the traffic, sending a problem to verify the sender is an actual user, or other actions.

Abstract: A Multi-Threaded Indexed (“MTI”) file system may use a first set of threads, processes, or executable instances to index desired file attributes in a database while simultaneously but independently executing file operations with a second set of threads, processes, or executable instances. In response to receiving a file operation, the second set of threads, processes, or executable instance may query the database to directly identify files that are indirectly implicated by the file operation with a wildcard, regular expression, and/or other expression that indirectly identifies the files based on different file attributes, paths, name expressions, or combinations thereof. The second set of threads, processes, or executable instances are therefore able to identify the files implicated by the file operation based solely on the indexed file attributes already entered in the database without the need to load and scan the metadata of files in directories targeted by the file operation.

Abstract: Gateway devices at different sites of a primary Anycast network provide access to the sites by advertising a first set of Anycast addresses. A secondary shadow Anycast network advertises different second sets of Anycast addresses from the different sites in order to predetermine traffic shifts that occur as a result of changing one or more of the second set of Anycast addresses that are advertised from one or more of the sites. A traffic shifting device may implement a predetermined traffic shift in the primary Anycast network by selecting a particular second set of network addresses that produces a traffic shift at least equal to the predetermined traffic shift, mapping the particular second set of network addresses to a modified first set of addresses, and modifying routing in the primary Anycast network by advertising the modified first set of addresses instead of the first set of addresses.