Abstract: A system and method for routing data packets between different overlay networks is disclosed. The method includes receiving a DNS lookup request for a resource from a first computing device coupled to a first overlay network. The first overlay network comprises a first edge application gateway. The method includes identifying a second computing device coupled to a second overlay network comprising the resource requested. The second overlay network comprises a second edge application gateway. The method further includes identifying a third overlay network. The data packets generated at, the first computing device is transferred to the first edge application gateway. The data packets are then transmitted from the first edge application gateway and the second edge application gateway over the third overlay network.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a private domain name system (DNS) receives a DNS lookup request from a computing system of a plurality of computing systems associated with a private communication group, and forwards the DNS lookup request to a public DNS. The private DNS further receives a public address associated with the DNS lookup request from the public DNS, translates the public address to a private address, and transfers the private address to the requesting computing system.

Abstract: A system and method for performing load balancing over an overlay network is disclosed. The load balancing is performed by a DNS load balancing module communicating to a plurality of computing devices communicatively coupled over the overlay network. The DNS load balancing module calculates and maintains a weighted value of each computing device among the plurality of computing device based on a plurality of parameters. The DNS load balancing module on receiving a DNS lookup request for a resource from a first computing device identifies a list of computing device among the plurality of computing device hosting the requested resource. The DNS load balancing module further performs load balancing by selecting a computing device among a list of computing devices for accessing the resource based on a weighted value calculated.

Abstract: A system and method for redirecting data packets communicated to a computing device over an overlay network is disclosed. The method includes monitoring resources installed on the computing device to identify the resources communicating over dedicated underlay IP address. The method further includes creating a rule based on the resources identified. The rule is transferred and stored on the computing device. On receiving a data packet, the rule is executed for redirecting the data packets from the overlay network to an underlay network and vice versa. The data packets are redirected by translating a destination IP address on a header of the data packet from an overlay IP address to an underlay IP address. The method thus redirects the data packets from the overlay network to the underlay network before reaching the resource, thereby preventing dropping of the data packet.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request from an application on the computing system to transfer data to a second application on a second computing system. In response to the communication request, the communication service identifies a communication group of a plurality of communication groups associated with the application and the second application. Once the communication group is identified, the communication service identifies a communication quality of service based on the identified communication group, and transfers the data associated with the communication request to the second computing system in accordance with the communication quality of service.

Abstract: To obviate the possibility of a data packet requesting for a communication between a source computer and a destination computer being blocked either by a source firewall or a destination firewall or both, the source computer is configured to transmit the data packet to an intermediary sever, bypassing the source firewall and the destination firewall. The intermediary server is configured to analyze the data packet transmitted from the source computer and is further configured to acknowledge the need to establish a communication between the source computer and the destination computer. The intermediary server subsequently generates a notification notifying the destination computer to establish a communication with the source computer. The intermediary server transmits a notification to the destination computer and triggers the destination computer to respond to the notification and establish a communication session with the source computer.

Abstract: A system and method for routing data packets between different overlay networks is disclosed. The method includes receiving a DNS lookup request for a resource from a first computing device coupled to a first overlay network. The first overlay network comprises a first edge application gateway. The method includes identifying a second computing device coupled to a second overlay network comprising the resource requested. The second overlay network comprises a second edge application gateway. The method further includes identifying a third overlay network. The data packets generated at, the first computing device is transferred to the first edge application gateway. The data packets are then transmitted from the first edge application gateway and the second edge application gateway over the third overlay network.

Abstract: A system and method for performing load balancing over an overlay network is disclosed. The load balancing is performed by a DNS load balancing module communicating to a plurality of computing devices communicatively coupled over the overlay network. The DNS load balancing module calculates and maintains a weighted value of each computing device among the plurality of computing device based on a plurality of parameters. The DNS load balancing module on receiving a DNS lookup request for a resource from a first computing device identifies a list of computing device among the plurality of computing device hosting the requested resource. The DNS load balancing module further performs load balancing by selecting a computing device among a list of computing devices for accessing the resource based on a weighted value calculated.

Abstract: A system and method for redirecting data packets communicated to a computing device over an overlay network is disclosed. The method includes monitoring resources installed on the computing device to identify the resources communicating over dedicated underlay IP address. The method further includes creating a rule based on the resources identified. The rule is transferred and stored on the computing device. On receiving a data packet, the rule is executed for redirecting the data packets from the overlay network to an underlay network and vice versa. The data packets are redirected by translating a destination IP address on a header of the data packet from an overlay IP address to an underlay IP address. The method thus redirects the data packets from the overlay network to the underlay network before reaching the resource, thereby preventing dropping of the data packet.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request for a first application on a first computing system to transfer data to a second application on a second computing system. In response to the request, the communication service generates a packet, wherein the packet includes an encrypted portion for the data and private addressing associated with the first and second applications, and an unencrypted portion for group identifier information and public addressing information. Once the packet is generated, the packet is transferred to the second computing system.

Abstract: Described herein are systems, methods, and software to enhance gateway security for multiple communication groups. In one implementation, a method of operating a gateway service includes identifying a data packet received from a first computing system, wherein the data packet comprises a first destination port value. The method further includes, identifying a group identifier within the data packet, wherein the group identifier associated with a communication group of the plurality of communication groups, translating the first destination port value to a second destination port value based on the group identifier, and forwarding the data packet with the translated second destination port value.

Abstract: To obviate the possibility of a data packet requesting for a communication between a source computer and a destination computer being blocked either by a source firewall or a destination firewall or both, the source computer is configured to transmit the data packet to an intermediary sever, bypassing the source firewall and the destination firewall. The intermediary server is configured to analyze the data packet transmitted from the source computer and is further configured to acknowledge the need to establish a communication between the source computer and the destination computer. The intermediary server subsequently generates a notification notifying the destination computer to establish a communication with the source computer. The intermediary server transmits a notification to the destination computer and triggers the destination computer to respond to the notification and establish a communication session with the source computer.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a private domain name system (DNS) receives a DNS lookup request from a computing system of a plurality of computing systems associated with a private communication group, and forwards the DNS lookup request to a public DNS. The private DNS further receives a public address associated with the DNS lookup request from the public DNS, translates the public address to a private address, and transfers the private address to the requesting computing system.

Abstract: Described herein are systems, methods, and software to enhance gateway security for multiple communication groups. In one implementation, a method of operating a gateway service includes identifying a data packet received from a first computing system, wherein the data packet comprises a first destination port value. The method further includes, identifying a group identifier within the data packet, wherein the group identifier associated with a communication group of the plurality of communication groups, translating the first destination port value to a second destination port value based on the group identifier, and forwarding the data packet with the translated second destination port value.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request from an application on the computing system to transfer data to a second application on a second computing system. In response to the communication request, the communication service identifies a communication group of a plurality of communication groups associated with the application and the second application. Once the communication group is identified, the communication service identifies a communication quality of service based on the identified communication group, and transfers the data associated with the communication request to the second computing system in accordance with the communication quality of service.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request for a first application on a first computing system to transfer data to a second application on a second computing system. In response to the request, the communication service generates a packet, wherein the packet includes an encrypted portion for the data and private addressing associated with the first and second applications, and an unencrypted portion for group identifier information and public addressing information. Once the packet is generated, the packet is transferred to the second computing system.