Abstract: A system and method for client-side authentication for secure Internet communications is disclosed. In one embodiment, an intermediate device receives a web browser secure socket layer certificate from a web browser, authenticates the web browser using the secure socket layer certificate, and then re-signs the secure socket layer certificate with an intermediate device public key and an intermediate device certificate authority signature. The intermediate device sends the re-signed secure socket layer certificate to a web server and the web server authenticates the intermediate device using the re-signed secure socket layer certificate. In another embodiment, an intermediate device receives a web browser secure socket layer certificate from a web browser, inserts the web browser secure socket layer certificate into a HTTP header of a packet, and sends the packet to a web server.

Abstract: The present invention provides a method and apparatus for increasing the performance of world-wide-web traffic over the Internet. A distributed network of specialized nodes of two types is dispersed around the Internet. A web client's requests are directed to a node of the first type chosen to be close to the client, and the client communicates with this node using a standard protocol such as HTTP. This first node receives the request, and communicates the request to a node of the second type chosen to be close to the request's ultimate destination (e.g., a web server capable of generating a response to the request.) The first node communicates the request to the second node using a different, specialized, protocol that has been designed for improved performance and specifically to reduce traffic volume and to reduce latency.

Abstract: The present invention provides a method and apparatus for increasing the performance of world-wide-web traffic over the Internet. A distributed network of specialized nodes of two types is dispersed around the Internet. A web client's requests are directed to a node of the first type chosen to be close to the client, and the client communicates with this node using a standard protocol such as HTTP. This first node receives the request, and communicates the request to a node of the second type chosen to be close to the request's ultimate destination (e.g., a web server capable of generating a response to the request.) The first node communicates the request to the second node using a different, specialized, protocol that has been designed for improved performance and specifically to reduce traffic volume and to reduce latency.

Abstract: The invention provides a method and a system for associating the IP address of a client within a computer network with the address of the client's local domain name system (LDNS) server (“network discovery” function), and may furthermore use this association to provide such functions as network proximity analysis and load balancing. When a client's LDNS server queries the authoritative DNS (ADNS) server about an IP address of an application server, a name server monitor (NSM) of that ADNS server returns an IP address of an application server monitor (ASM) of the appropriate application server, instead of the address of the server itself, and records the IP address of the querying LDNS server, the ASM address returned, and a timestamp. When the ASM of the application server receives a request for web content from the client, it records the IP address of the client and a timestamp, with possibly other pertinent information (round-trip time, bandwidth estimate, etc.

Abstract: The invention uses a distributed network of specialized nodes of different types dispersed around the Internet. In operation, web client's requests are directed to a node of a first type chosen to be close to the client, and the client communicates with this node using a standard protocol such as HTTP. This first node receives the request, and locates a node of a second type, chosen to be an optimal initial relay on a path to the web server. The first node may communicates the request to the second node using a different, specialized, protocol that has been designed for improved performance and specifically to reduce traffic volume and to reduce latency. The second node receives communication from the first node using this specialized protocol, and relays it to an optimally chosen third node using the same, or possibly different internode communication protocol.

Abstract: The present invention provides a method and apparatus for increasing the performance of world-wide-web traffic over the Internet. A distributed network of specialized nodes of two types is dispersed around the Internet. A web client's requests are directed to a node of the first type chosen to be close to the client, and the client communicates with this node using a standard protocol such as HTTP. This first node receives the request, and communicates the request to a node of the second type chosen to be close to the request's ultimate destination (e.g., a web server capable of generating a response to the request.) The first node communicates the request to the second node using a different, specialized, protocol that has been designed for improved performance and specifically to reduce traffic volume and to reduce latency.