Abstract: A network gateway is implemented on behalf of a customer entity. The network gateway may be implemented using a distributed computer system and the network gateway may connect a network of the customer entity to a public communications network. The network gateway may include network-related services without the need for adding specialized hardware. The network gateway may be provisioned programmatically in response to instructions received from the customer entity. The network gateway may be provisionable and accessible over several different types of data connections. The network gateway, by virtue of being implemented on a distributed computer system, is scalable upon demand without additional input by the customer entity.

Abstract: Disclosed are various embodiments for automated detection of multi-user computing devices such as kiosks, public terminals, and so on. Network resource requests are obtained from a client computing device. It is determined whether the client computing device is a multi-user system based at least in part on whether the network resource requests embody characteristics associated with multi-user systems. The resulting classification is stored and may be used to customize generation of requested network resources.

Abstract: Methods, systems, and computer readable media for communicating media server capabilities and status information between a plurality of media servers and a media resource broker are disclosed. According to one method, messages are received at a media resource broker from a plurality of media servers, where the messages include information indicating capabilities and status of the media servers. The information regarding the capabilities and status of the media servers is cached at the media resource broker, which receives call setup requests and, in response, selects a media server from the plurality of media servers based on the cached media server capabilities and status information.

Abstract: The present invention extends to methods, systems, and computer program products for using templates to configure cloud resources. Embodiments of the invention include encapsulating cloud configuration information in an importable/exportable node template. Node templates can also be used to bind groups of nodes to different cloud subscriptions and cloud service accounts. Accordingly, managing the configuration of cloud based resources can be facilitated through an interface at a (e.g., high performance) computing component. Templates can also specify a schedule for starting/stopping instance running within a resource cloud.

Abstract: In one embodiment, a method includes generating at a network device comprising a virtual switch, a tenant record comprising tenant information for a context defined within the virtual switch, exporting the tenant record to a collector, monitoring network flow at the virtual switch, and exporting network flow data in a data record to the collector. The data record includes an identifier associating the data record with the context. An apparatus is also disclosed.

Abstract: To access a communication managed by a host communicating entity between participant communicating entities including the host communicating entity via a packet network (RP), a third-party communicating entity transmits a message (MI) to the host communicating entity, which message comprises at least one parameter (PM) associated with an identifier of at least one participant communicating entity. The third-party entity's access to a peer-to-peer communication established between the host entity and a participant entity may create a conference between the three entities. The third-party entity's access to a conference communication may cause a participant to be added to the existing conference. The host communicating entity applies a restrictive policy on mixing communication flows exchanged between the communicating entities as a function of the parameter and the identifier of the participant communicating entity associated with the parameter.

Abstract: A mechanism for idling an application in a multi-tenant cloud hosting environment is disclosed. A method of the invention includes detecting, by a reverse proxy of a node of a cloud computing architecture, a lack of minimum usage of an application hosted on the node, the application being one of a plurality of applications being hosted on the node and instructing the node to shut down the application in response. The reverse proxy is then; and reconfigured to point to a restarter instead of the application, wherein the restarter restarts the application in response to detecting an access to the application.

Abstract: A self-help application platform such as one hosting an interactive voice response (IVR) has a browser that executes application scripts to implement the self-help application. The execution of the application scripts is performed by utilizing various application resources, such as media conversions from text to speech (TTS) and speech to text (automatic speech recognition ASR) and other media servers. The platform is provided with a dynamic resource selection mechanism in which the application is executed with an updated optimum set of application resources distributed over different locations. The selection is based on the profiles of the browser, users, route, and quality of service. The selection is further modulated by the browser's previous experiences with the individual resources. The selection is made dynamically during the executing of the application script.

Abstract: Methods and apparatus to provide performance data transformation in a cloud computing system. In one embodiment, the system performs data transformation with information from a configuration subsystem, to generate metrics for network layer, storage layer, compute layer, and logical components.

Abstract: The present invention provides a computer-implemented method, system, tool, and program product for sending a customized reply to an instant message. Specifically, under the present invention, a customized message may be provided for a specific instant messaging contact/availability status combination. When the availability status is selected and a message is received from the instant messaging contact, the customized message is automatically sent to the messaging contact. The invention may also be integrated into a calendaring application to determine, for example, whether the message recipient is in a meeting and, if so, to automatically send a reply that gives an estimated ending time for the meeting.

Abstract: A client device displays message content from one or more email messages in a conversation thread. The client device displays, concurrently with the message content from the one or more email messages, one or more respective social network objects. Each displayed social network object has one or more selection portions, and each displayed social network object corresponds to a respective post by a respective participant in the conversation thread. In response to selection of a first portion of a respective social network object of the one or more displayed social network objects, the client device displays a respective social network page of the respective participant who authored the respective post corresponding to the respective social network object.

Abstract: A owner command to an application hosted by a platform as a service (PaaS) system can be performed, in one embodiment, by receiving the command from the authenticated owner at a first resource pool containing a first application component of the application, wherein the first node hosts a plurality of resource pools each containing application components belonging to different application owners. A second resource pool associated with the application is then identified, the second resource pool being hosted on a second node and containing a second application component of the application. The, a command implementation sequence defining the implementation of the received command over multiple application components is executed by performing a first action on the first application component on the first node and performing a second action on the second application component on the second node.

Abstract: A processor accesses usage history data, which includes subscription events for a virtual machine, and generates translatable time periods to which the subscription events can be assigned. Each of the translatable time periods is temporally shifted and each of the subscription events is assigned to one or more translatable time periods. The processor generates translation outcomes for a user of the virtual machine for the translatable time periods in view of assigned subscription events. The translation outcomes include an identified change in subscription costs of the user over the translatable time periods. The processor identifies a translated base period from the translatable time periods for which the subscription parameters will be applied to the usage history data in view of applying selection criteria to the translation outcomes and tracks resource usage of the user in view of the identified translated base period to determine an alternate set of subscription costs.

Abstract: A method for providing content syndication to subscribers including receiving one or more content items from a plurality of information sources. One or more tags are assigned to the one or more content items, the one or more tags indicating a taxonomy of the one or more content items. One or more keywords associated with the one or more content items and a media type of the one or more content items are identified. The one or more content items are indexed with the one or more tags, the one or more keywords, and the media type. The method further includes retrieving the one or more content items based on the one or more tags, the one or more keywords, and the media type.

Abstract: Among other disclosed subject matter, a computer-implemented method includes receiving a first, a second and a third network address mapping. The method includes mapping each of the network addresses in the first, second and third network address mappings to respective first, second and third locations. The method includes determining, for each of the network addresses in the first, second and third network address mappings, location agreements. The method includes determining a first and second network address mapping agreement rate, a first and third network address mapping agreement rate, and a second and third network address mapping agreement rate, respectively based on location agreements determined for each of the network addresses. The method includes determining a confidence level associated with the first network address mapping based on the agreement rates.

Abstract: Technologies are described herein for establishing a secure tunnel infrastructure between host computers in a hybrid network environment. A first network tunnel is established between a border device in a first network and a border device in a second network. A second network tunnel is established between a first host computer in the first network and the border device in the first network. Similarly, a third network tunnel is established between the border device in the second network and a second host computer in the second network. The networking infrastructures of the first and second networks are then configured so that network packets from the first host computer arriving at the border device in the first network through the second network tunnel are sent through the first network tunnel to the border device in the second network, and then through the third network tunnel to the second host computer.

Abstract: Systems and methods for processing a DNS query to identify and implement pre-processing information by a DNS server component in anticipation of a corresponding content request from a client computing device are provided. The pre-processing information can correspond to identification of content to be preloaded or other actions to be implemented by one or more computing devices in association with an anticipated client content request. Based on identification of the content or future actions, a DNS server component can provide the pre-processing information to one or more computing devices, such as computing devices of a CDN service provider and/or an original content provider, in advance of a corresponding request for content from the client computing device in order to improve performance associated with responding to the client request.

Abstract: Technologies are described herein for establishing a secure tunnel infrastructure between host computers in a hybrid network environment. A first network tunnel is established between a border device in a first network and a border device in a second network. A second network tunnel is established between a first host computer in the first network and the border device in the first network. Similarly, a third network tunnel is established between the border device in the second network and a second host computer in the second network. The networking infrastructures of the first and second networks are then configured so that network packets from the first host computer arriving at the border device in the first network through the second network tunnel are sent through the first network tunnel to the border device in the second network, and then through the third network tunnel to the second host computer.

Abstract: A computer-implemented method for changing fencing modes in clusters may include (1) identifying a cluster of nodes configured with a fencing mode for resolving split-brain scenarios within the cluster, (2) identifying a request to reconfigure the cluster of nodes with a new fencing mode, (3) transmitting the request to each node in the cluster of nodes, (4) in response to the request, for each node in the cluster of nodes, testing the operability of the new fencing mode from the node, (5) receiving a message from the node indicating the success of the test; and, after receiving the message indicating the success of the test from every node within the cluster of nodes, and (6) reconfiguring each node within the cluster of nodes to use the new fencing mode. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Methods and apparatus for providing inline network traffic monitoring such as intrusion detection to clients of a provider network. A client can configure new or existing components and specify that traffic monitoring be added on or at the components in the client's configuration on the provider network. Traffic monitoring is automatically and transparently added to the client's configuration on or at the components. Traffic to the client's configuration passes through the traffic monitoring technology. Traffic monitoring technology may be implemented on a resource in the client's configuration that implements other technology, such as a load balancer component. Alternatively, traffic monitoring technology may be implemented on separate components upstream or downstream of a resource that implements other technology. Traffic monitoring may be implemented at a network substrate level rather than at an overlay network level.