Abstract: Embodiments establish a pool of tunnel connections using a secure protocol. A pool of tunnels can be initiated from endpoint connection managers to cloud connection managers, where a request is received from the endpoint connection managers by the cloud connection managers. A request from a cloud client to communicate with a secure computing device using a first of the endpoint connection managers is received at a first of the cloud connection managers. One of the pool of tunnels that is connected to the first endpoint connection manager is identified. The identified tunnel is configured to connect the cloud client and the first endpoint connection manager.

Abstract: Embodiments establish a pool of tunnel connections using a secure protocol. A pool of tunnels can be initiated from endpoint connection managers to cloud connection managers, where a request is received from the endpoint connection managers by the cloud connection managers. A request from a cloud client to communicate with a secure computing device using a first of the endpoint connection managers is received at a first of the cloud connection managers. One of the pool of tunnels that is connected to the first endpoint connection manager is identified. The identified tunnel is configured to connect the cloud client and the first endpoint connection manager.

Abstract: Described is an improved approach to ensure high availability for established sessions (e.g., application layer sessions) over network connections that negotiates and renegotiates encryption keys (e.g., TLS/SSL) at clean boundaries to ensure in-transit data are properly handled during migration of an application (e.g., a reverse proxy server instance). Connected TCP sessions may be handed off to another application (e.g., from existing proxy server to new/upgraded proxy server) and after establishing a new TLS session with a new encryption key, data transfer may be resumed between a client and a server using the new/upgraded application in a client-server architecture.

Abstract: Described is an improved approach to ensure high availability for established sessions (e.g., application layer sessions) over network connections that negotiates and renegotiates encryption keys (e.g., TLS/SSL) at clean boundaries to ensure in-transit data are properly handled during migration of an application (e.g., a reverse proxy server instance). Connected TCP sessions may be handed off to another application (e.g., from existing proxy server to new/upgraded proxy server) and after establishing a new TLS session with a new encryption key, data transfer may be resumed between a client and a server using the new/upgraded application in a client-server architecture.

Abstract: The techniques are provided automatically detecting when performing pre-transmission compression on data to be sent over a network connection will be preferable to sending the data uncompressed, and for automatically performing pre-transmission compression only when doing so is determined to be beneficial. The techniques involve performing compression on sample data. The time it takes to perform the compression on the sample data, along with the reduction in size achieved by the compression, are factors used to automatically determine whether compressing data before sending the data over a network connection will achieve better results that sending the data uncompressed. In some embodiments, multiple compression algorithm/compression level combinations are tested at different points in the transmission. At each point, the sending device may switch to the algorithm/level combination that is producing the best results on the current sample.

Abstract: The techniques are provided automatically detecting when performing pre-transmission compression on data to be sent over a network connection will be preferable to sending the data uncompressed, and for automatically performing pre-transmission compression only when doing so is determined to be beneficial. The techniques involve performing compression on sample data. The time it takes to perform the compression on the sample data, along with the reduction in size achieved by the compression, are factors used to automatically determine whether compressing data before sending the data over a network connection will achieve better results that sending the data uncompressed. In some embodiments, multiple compression algorithm/compression level combinations are tested at different points in the transmission. At each point, the sending device may switch to the algorithm/level combination that is producing the best results on the current sample.