Abstract: A method including determining, by a first device having an established virtual private network (VPN) connection with a VPN server and an established meshnet connection with a second device in a mesh network, a transmission packet to be transmitted by the first device; and transmitting, by the first device, the transmission packet to the second device utilizing the meshnet connection based at least in part on determining that a destination associated with the transmission packet is the second device or to the VPN server utilizing the VPN connection based at least in part on determining that the destination associated with the transmission packet is a device other than the second device. Various other aspects are contemplated.

Abstract: A method including transmitting, by a user device to an infrastructure device, a first pre-authentication request associated with requesting communication services from a server, the first pre-authentication request indicating a communication parameter associated with the user device; determining, by the user device while obtaining the communication services from the server, a change in the communication parameter such that the user device is associated with a new communication parameter; and transmitting, by the user device to the infrastructure device, a second pre-authentication request associated with obtaining the communication services from the server, the second pre-authentication request indicating the new communication parameter. Various other aspects are contemplated.

Abstract: A method including authenticating, by a processor, received biometric information; selectively transmitting, by the processor based at least in part on a result of authenticating the received biometric information, a decryption request to decrypt an encrypted assigned private key; receiving, by the processor based at least in part on selectively transmitting the decryption request, a decrypted assigned private key; and decrypting, by the processor, encrypted content based at least in part on utilizing the decrypted assigned private key is disclosed. Various other aspects are contemplated.

Abstract: A method including monitoring, by a processor associated with a first device having an established VPN connection with a VPN server and an established meshnet connection with a second device, communication of transmission packets to be transmitted by the first device; receiving, by the processor, a transmission packet to be transmitted by the first device; determining, by the processor, a destination associated with the transmission packet based at least in part on metadata included in the transmission packet; and routing, by the processor, the transmission packet for transmission via the VPN connection or for transmission via the meshnet connection based at least in part on determining whether the second device is the destination associated with the transmission packet. Various other aspects are contemplated.

Abstract: A method including configuring a security device to receive, from a user device, a transmission packet; configuring the security device to determine, based on a destination IP address, whether the user device is permitted to transmit the transmission packet; configuring the security device to determine, based on determining that the user device is permitted to transmit the transmission packet, whether the user device is permitted to transmit to a port associated with the destination IP address; configuring the security device to determine, based on determining that the user device is permitted to transmit to the port, whether the user device is permitted to utilize a protocol utilized by the user device; and configuring the security device to determine, based on determining that the user device is permitted to utilize the protocol, whether the user device is permitted to utilize a web application utilized by the user device is disclosed.

Abstract: A method including assigning, by a virtual private network (VPN) server, a first exit internet protocol (IP) address to communicate data associated with a user device having an established VPN connection with the VPN server; determining, by the VPN server, occurrence of a network event associated with the first exit IP address; and assigning, by the VPN server based at least in part on determining occurrence of the network event, a second exit IP address to communicate the data associated with the user device during the established VPN connection, the second exit IP address being different from the first exit IP address is disclosed. Various other aspects are contemplated.

Abstract: A method including determining, by a first device in communication with a second device in a mesh network, an access policy associated with processing internet protocol (IP) packets received from the second device in the mesh network; determining, by the first device in the mesh network, that an IP packet is received from the second device over a meshnet connection between the first device and the second device; and processing, by the first device in the mesh network, the IP packet received from the second device in accordance with the access policy based at least in part on determining that the IP packet is received from the second device. Various other aspects are contemplated.

Abstract: A method including receiving, by an infrastructure device in communication with a first device in a mesh network, a binding request from a meshnet local port associated with the first device that is dedicated for communicating meshnet data associated with the first device, the binding request requesting the infrastructure device to determine a currently allocated public port associated with the first device; and transmitting, by the infrastructure device to the first device, a response indicating the currently allocated public port associated with the first device. Various other aspects are contemplated.

Abstract: A method including determining, by an infrastructure device, a configuration file including update information associated with updates to a current configuration of a client application installed on a user device; providing, by the infrastructure device, the configuration file in association with a stored hash value that is determined based at least in part on the update information included in the configuration file; obtaining, by the user device, the configuration file based at least in part on determining that the stored hash value is different from a calculated hash value that is determined based at least in part on information associated with the current configuration of the client application; and selectively adopting, by the user device, the updates included in the configuration file to update the current configuration of the client application. Various other aspects are contemplated.

Abstract: A method including determining, by a user device, availability of a configuration file including updates to a current configuration of a client application installed on the user device; obtaining, by the user device, the configuration file based at least in part on determining that the configuration file including the updates is available; and selectively adopting, by the user device, the updates included in the configuration file to update the current configuration of the client application. Various other aspects are contemplated.

Abstract: A method including receiving, by a user device, encrypted content and an encrypted assigned private key associated with the encrypted content; decrypting, by the user device, the encrypted assigned private key based at least in part on utilizing a master key to determine a decrypted assigned private key; determining, by the user device, a combination decryption key based at least in part on utilizing the decrypted assigned private key and an access public key associated with the encrypted content; decrypting, by the user device, an encrypted access private key associated with the access public key to determine a decrypted access private key; and decrypting, by the user device, the encrypted content based at least in part on utilizing the decrypted access private key is disclosed. Various other aspects are contemplated.

Abstract: A method including communicating, by a first device, data with a second device based at least in part on communication information indicating a communication parameter associated with the second device, the data being communicated over a meshnet connection associated with a mesh network; receiving, by the first device while communicating the data in the mesh network, updated communication information indicating an updated communication parameter associated with the second device; and communicating, by the first device, the data with the second device over the meshnet connection based at least in part on the updated communication information. Various other aspects are contemplated.

Abstract: A method including configuring a security device to receive registration information indicating groups of user devices; configuring the security device to receive policy information indicating respective filtering policies for each group of user devices; configuring the security device to receive a transmission packet for transmission to a destination device over an open internet; configuring the security device to determine, based on the registration information, the group of user devices to which the user device belongs; configuring the security device to determine, based on the policy information and on determining the group to which the user device belongs, whether the user device is permitted to transmit the transmission packet; and configuring the security device to selectively block transmission of the transmission packet based on determining whether the user device is permitted to transmit the transmission packet is disclosed.

Abstract: A method including receiving, by a security device, registration information indicating groups to which user devices belong; receiving, by the security device, policy information indicating respective filtering policies for each group of user devices; receiving, from a user device, a transmission packet for transmission to a destination device over an open Internet; determining, by the security device based on the registration information, the group of user devices to which the user device belongs; determining, by the security device based on the policy information and on determining the group of user devices to which the user device belongs, whether the user device is permitted to transmit the transmission packet to the destination device; and selectively blocking, by the security device, transmission of the transmission packet on determining whether the user device is permitted to transmit the transmission packet to the destination device is disclosed. Various other aspects are contemplated.

Abstract: A method including determining, by a first device communicating meshnet data via a meshnet connection with a second device in a mesh network, occurrence of a downgrade triggering event indicating that the first device and the second device are to communicate the meshnet data via a relay connection; transmitting, by the first device to the second device based on determining the occurrence of the downgrade triggering event, a downgrade message; determining, by the first device communicating the meshnet data via the relay connection, occurrence of an upgrade triggering event indicating that the first device and the second device are to communicate the meshnet data via a new meshnet connection; and transmitting, by the first device to the second device based on determining the occurrence of the upgrade triggering event, an upgrade message is disclosed. Various other aspects are contemplated.

Abstract: A method including determining a first master key based on receiving a master string; decrypting, based on utilizing the first master key, an encrypted first cryptographic key; decrypting, based on utilizing the first cryptographic key, first factor authentication information to enable determination of a first factor; transmitting the first factor for authentication of the first factor; transmitting, based on successful authentication of the first factor and on verifying biometric information, a decryption request including an encrypted second cryptographic key in association with an identifier to indicate that the encrypted second cryptographic key is to be decrypted based on utilizing a second master key identified by the second identifier; decrypting, based on receiving the second cryptographic key, second factor authentication information to enable determination of a second factor; and transmitting the second factor for authentication to enable receipt of a service based on successful authentication of th

Abstract: A method including receiving, by a first device in communication with a second device in a mesh network, a communication from the second device over a meshnet connection between the first device and the second device; configuring, by the first device, firewall settings associated with the first user device, the firewall settings indicating an access policy associated with processing communications received from the second device; and selectively transmitting, by the first device, the communication to an external device outside the mesh network based at least in part on the access policy. Various other aspects are contemplated.

Abstract: A method including storing, by a device in a database, a trusted fingerprint determined based at least in part on encrypting trusted connection information included in a trusted transmission packet received from a trusted source application; determining, by the device, a current fingerprint based at least in part on encrypting current connection information included in a current transmission packet received from a current source application; comparing, by the device, the current fingerprint with the trusted fingerprint; and processing, by the device, the current transmission packet based at least in part on a result of comparing the current fingerprint with the trusted fingerprint. Various other aspects are contemplated.

Abstract: A method including configuring a security device to store, in a database, a trusted fingerprint determined based at least in part on encrypting trusted connection information included in a trusted transmission packet received from a trusted source application; configuring the security device to determine a current fingerprint based at least in part on encrypting current connection information included in a current transmission packet received from a current source application; configuring the security device to compare the current fingerprint with the trusted fingerprint; and configuring the security device to process the current transmission packet based at least in part on a result of comparing the current fingerprint with the trusted fingerprint. Various other aspects are contemplated.

Abstract: A method including receiving, by a first device from a second device in a mesh network, a first status message including status information indicating that the second device is operating as an entry device with respect to the first device or that the first device is operating in the mesh network as an exit device with respect to the second device; and transmitting, to a third device in the mesh network, a second status message including the status information included in the first status message based at least in part on determining that the first device is operating as an entry device with respect to the third device or that the third device is operating as an exit device with respect to the first device. Various other aspects are contemplated.