Abstract: A request to establish a bi-directional full-duplex network connection is received. The request conforms to a half-duplex network connection protocol and the half-duplex connection protocol is a HTTP based protocol. The request is processed to determine a decision on whether to allow the bi-directional full-duplex connection. In the event the decision is to allow the bi-directional full-duplex connection, the bi-directional full-duplex network connection is established using the half-duplex network connection protocol. The bi-directional full-duplex connection utilizes a WebSocket communication protocol. Establishing the bi-directional full-duplex connection utilizes a plurality of half duplex connections. A confirmation that the bi-directional full-duplex network connection has been established is provided.

Abstract: A request to establish a bi-directional full-duplex network connection is received. The request conforms to a half-duplex network connection protocol and the half-duplex connection protocol is a HTTP based protocol. The request is processed to determine a decision on whether to allow the bi-directional full-duplex connection. In the event the decision is to allow the bi-directional full-duplex connection, the bi-directional full-duplex network connection is established using the half-duplex network connection protocol. The bi-directional full-duplex connection utilizes a WebSocket communication protocol. Establishing the bi-directional full-duplex connection utilizes a plurality of half duplex connections. A confirmation that the bi-directional full-duplex network connection has been established is provided.

Abstract: A request to establish a bi-directional full-duplex network connection is received. The request conforms to a half-duplex network connection protocol and the half-duplex connection protocol is a HTTP based protocol. The request is processed to determine a decision on whether to allow the bi-directional full-duplex connection. In the event the decision is to allow the bi-directional full-duplex connection, the bi-directional full-duplex network connection is established using the half-duplex network connection protocol. The bi-directional full-duplex connection utilizes a WebSocket communication protocol. Establishing the bi-directional full-duplex connection utilizes a plurality of half duplex connections. A confirmation that the bi-directional full-duplex network connection has been established is provided.

Abstract: Adjusting a WebSocket communication rate is disclosed. A WebSocket frame is received. It is determined that the WebSocket frame includes an indicator of a desired WebSocket communication rate. A transmission rate of a WebSocket communication is adjusted. The transmission rate is adjusted based at least in part on the received desired WebSocket communication rate.

Abstract: Network connection management is disclosed. Internet Protocol addresses associated with an initial host identifier of a first network node of a network cluster of a plurality of network nodes are requested. In response to the request, a plurality of IP addresses is received. For each of the received IP addresses, an alternate host identifier is discovered. A request to establish a network connection with the first network node is received from a client. It is determined whether to redirect the network connection to a second network node of the network cluster. In the event it is determined that the network connection should be redirected, one of the discovered alternate host identifiers is selected as a redirect destination identifier and providing to the client the selected alternate host identifier as the redirect destination identifier.

Abstract: A system enabling service communications in distributed Web applications between servers otherwise inaccessible due to cross-origin security restrictions in pre-HTML5 compliant Web-browser clients. A Web-browser client executes a client-side Web application received from a source origin server having a defined source origin and requests connections to request identified Web-application services. Execution of an emulation client library establishes a bidirectional capable HTTP-based communications connection between the Web-browser client and a gateway server, having a target origin outside the scope of the source origin, providing access to the request identified Web-application service. The bidirectional capable HTTP-based communications connection includes a cross-origin communications bridge providing a secure communications path between the source and target origins.

Abstract: Labeling data is disclosed. Data to be communicated using a first communication protocol is received. For each of a plurality of portions of the received data, a data grouping is identified among a plurality of data groupings of a network connection. A second communication protocol is used to label identified portions of the received data encoded in the first communication protocol with a corresponding data grouping identifier. The labeled identified portions of the data are provided via the network connection.

Abstract: Receiving a WebSocket frame is disclosed. The WebSocket frame is received. It is determined whether the WebSocket frame includes a control byte sequence in a payload data portion of the WebSocket frame. In the event the WebSocket frame includes in the payload data portion, the control byte sequence and other data, the WebSocket frame interpreted as including a control message. In the event the WebSocket frame does not include in the payload data portion, the control byte sequence, the WebSocket frame interpreted as not including the control message.

Abstract: Sending padding data is disclosed. Uncompressed communication data in a first data grouping is prepared using a data compression algorithm. A header of the first data grouping identifies that the first data grouping includes uncompressed contents. A second data grouping is selected. The second data grouping includes compressed padding data configured to fill a buffer of a receiver to at least a predetermined size. The first data grouping and the second data grouping are sent.

Abstract: A WebSocket connection is established. The WebSocket connection was established with a requester of the connection. The authentication of the requester is configured to expire. A request to revalidate the authentication is provided. An update of the authentication is received. The update of the authentication is received without disconnecting the WebSocket connection.

Abstract: Establishing a connection is disclosed. A first communication link with a perimeter gateway located external to a private network firewall but behind a perimeter network firewall is initiated. A request to allow the connection from a requestor that has requested the connection to an internal server via the perimeter gateway is received. A second communication link with the internal server protected by the private network firewall is initiated. The connection is allowed at least in part by associating together the first communication link with the second communication link.

Abstract: Dynamic program translation is utilized to convert an executable program in a first language executable representation to a second language executable representation that is either optimal or essentially required for execution within a defined execution environment on a client computer system. A dynamic translator, typically executed on a first computer system, is invoked in response to a request from a second computer system to provide an identified executable program. The dynamic translator performs an execution path analysis and optimized translation from a first representation, such as a Java class file, to generate executable code in the second representation, such as JavaScript. Optimizations include cross-language feature modifications, selective replacement of nominally un-translatable code portions, and insertion of call-back service requests to dynamically emulate services required in the execution of the program.

Abstract: A request to upgrade a connection to a WebSocket connection is received. A response that the connection has been upgraded to the WebSocket connection is provided. The WebSocket connection utilizes a WebSocket protocol. An identification of a set of one or more extensions to the WebSocket protocol of the WebSocket connection is received via the WebSocket connection.

Abstract: A gateway server interoperates with client and remote server systems to provide stateless security management for a distributed Web application. A Web client application on the client system initiates a WebSocket connection directed to a remote Web service by performing an authentication challenge directed to a user of the Web-browser client where a secure token is not present in a local store instance corresponding to the client application. The authentication challenge obtains the user credentials and then exchanges the user credentials with the gateway server for a secure token. The secure token is then sent in a protocol specific connect message to the gateway server.