Abstract: Methods and apparatuses, including computer program products, are described for preservation of communication sessions in a geographically redundant cloud-based environment. The system comprises a plurality of end point devices and a plurality of cloud-based system instances, each comprising one or more server computing devices. A first cloud-based system instance assigned a first physical address is configured to establish a communication session using the first physical address between a first end point device and a second end point device, and mirror information associated with the communication session to a second cloud-based system instance assigned a second physical address.

Abstract: Methods, apparatuses, and computer program products are described for securely connecting a plurality of ICE client devices without using TURN. A session border controller (SBC) receives, via a website application server, a connectivity message from a first ICE client device at a first relay port and a connectivity message from a second ICE client device at a second relay port. The SBC authenticates the messages using credential information received from the server, and latches address information associated with the first client device to the first relay port and address information associated with the second client device to the second relay port. The SBC forwards the message from the first client device to the second client device and the message from the second client device to the first client device, and establishes an ICE relay connection indirectly between the first client device and the second client device via the relay ports.

Abstract: A method for controlling session access within a cloud-based network license zone (NLZ) includes registering one or more virtual machines, modifying a zone-wide session license based upon the registration step and transmitting the modified license to the plurality of virtual machines. The method also includes periodically receiving a network access message from each of the other virtual machines, each network access message including a count of active sessions enumerated by service type currently processed by the other virtual machine, determining a summation of active sessions, the summation based in part on the network access messages and a count of active sessions currently processed by the virtual machine, and enforcing a total count of active sessions, each virtual machine configured to reject new session requests received at the virtual machine when the total count of active sessions exceeds a predetermined number of active sessions as defined in the modified license.

Abstract: Methods, apparatuses, and computer program products are described for securely connecting a plurality of ICE client devices without using TURN. A session border controller (SBC) receives, via a website application server, a connectivity message from a first ICE client device at a first relay port and a connectivity message from a second ICE client device at a second relay port. The SBC authenticates the messages using credential information received from the server, and latches address information associated with the first client device to the first relay port and address information associated with the second client device to the second relay port. The SBC forwards the message from the first client device to the second client device and the message from the second client device to the first client device, and establishes an ICE relay connection indirectly between the first client device and the second client device via the relay ports.

Abstract: Methods and apparatuses, including computer program products, are described for establishing and controlling communication sessions between SIP devices and website application servers. An access portal computing device is coupled between one or more SIP devices and one or more website application servers. The access portal is configured to authenticate SIP user credentials based upon receipt of a SIP message from a SIP device and determine website user credentials associated with a website application server based on the SIP user credentials. The access portal is configured to receive, from the website application server, a communication services application based upon transmission of the website credentials to the website application server, translate SIP requests received from the SIP device into web-based commands for transmission to the website application server, and translate web-based commands received from the website application server into SIP requests for transmission to the SIP device.

Abstract: A method for controlling session access within a network license zone (NLZ) includes receiving periodically, by the first network node, a first network access message from a second network node within the NLZ. The first network access message includes a number of active sessions enumerated by service type currently processed by the second network node. The method further includes determining, by the first network node, a first summation of active sessions within the NLZ based in part on the first network access message and a number of active sessions currently processed by the first network node. The method further includes enforcing, by the first network node, a total number of active sessions within NLZ. The first network node is configured to reject new session requests received at the first network node when the total number of active sessions within the NLZ exceeds a predetermined number of active sessions.

Abstract: A method for controlling session access within a network license zone (NLZ) includes receiving periodically, by the first network node, a first network access message from a second network node within the NLZ. The first network access message includes a number of active sessions enumerated by service type currently processed by the second network node. The method further includes determining, by the first network node, a first summation of active sessions within the NLZ based in part on the first network access message and a number of active sessions currently processed by the first network node. The method further includes enforcing, by the first network node, a total number of active sessions within NLZ. The first network node is configured to reject new session requests received at the first network node when the total number of active sessions within the NLZ exceeds a predetermined number of active sessions.

Abstract: Methods and apparatuses, including computer program products, are described for automatically creating ICE relay candidates without the use of the TURN protocol. The system introduces a media server device called a WebSBC server, available from Sansay, Inc. of San Diego, Calif. The WebSBC server is a device that exists in the network and receives control messages from another device in the network for the purpose of allocating a media relay port to be used by ICE clients in the network. The method includes the action of adding the allocated relay port to a media relay binding description (SDP) in the form of an ICE relay candidate. The method includes the passing of the modified SDP to an ICE client that is in the process of creating an audio or video session with another ICE client.