Abstract: Methods and apparatus for monitoring network links are disclosed. In one implementation, a client device composes a plurality of data packets and transmits the data packets via a network to a server via two or more ports of the client device. The data packets are transmitted via multiple paths across the network. After transmitting the data packets to the server, the client device composes and transmits a control packet to the server, where the control packet indicates a total number of the data packets that have been transmitted by the client device to the server.

Abstract: Methods and apparatus for monitoring network links are disclosed. In one implementation, a client device composes a plurality of data packets and transmits the data packets via a network to a server via two or more ports of the client device. The data packets are transmitted via multiple paths across the network. After transmitting the data packets to the server, the client device composes and transmits a control packet to the server, where the control packet indicates a total number of the data packets that have been transmitted by the client device to the server.

Abstract: Methods and apparatus for monitoring network links are disclosed. In one implementation, a client device composes a plurality of data packets and transmits the data packets via a network to a server via two or more ports of the client device. The data packets are transmitted via multiple paths across the network. After transmitting the data packets to the server, the client device composes and transmits a control packet to the server, where the control packet indicates a total number of the data packets that have been transmitted by the client device to the server.

Abstract: Systems and methods for diskless booting a remote server. The remote server includes a secure cryptoprocessor having a root key that is unique to the cryptoprocessor. Keying information can be fetched from an image server, which includes a certificate associated with the remote server and a private key of a key pair associated with the remote server. The key pair can be generated by the secure cryptoprocessor based on the root key. The client certificate can be created from a public key of the key pair. A mutually authenticated secure channel between the servers can be established by authenticating the servers based at least in part on the loaded keying information. Images of components of the remote server can be fetched from the image server via the secure channel, and then the remote server can be further booted accordingly.

Abstract: Systems and methods for diskless booting a remote server. The remote server includes a secure cryptoprocessor having a root key that is unique to the cryptoprocessor. Keying information can be fetched from an image server, which includes a certificate associated with the remote server and a private key of a key pair associated with the remote server. The key pair can be generated by the secure cryptoprocessor based on the root key. The client certificate can be created from a public key of the key pair. A mutually authenticated secure channel between the servers can be established by authenticating the servers based at least in part on the loaded keying information. Images of components of the remote server can be fetched from the image server via the secure channel, and then the remote server can be further booted accordingly.

Abstract: Methods and apparatus for monitoring network links are disclosed. In one implementation, a client device composes a plurality of data packets and transmits the data packets via a network to a server via two or more ports of the client device. The data packets are transmitted via multiple paths across the network. After transmitting the data packets to the server, the client device composes and transmits a control packet to the server, where the control packet indicates a total number of the data packets that have been transmitted by the client device to the server.

Abstract: Methods and apparatus for monitoring network links are disclosed. In one implementation, a client device composes a plurality of data packets and transmits the data packets via a network to a server via two or more ports of the client device. The data packets are transmitted via multiple paths across the network. After transmitting the data packets to the server, the client device composes and transmits a control packet to the server, where the control packet indicates a total number of the data packets that have been transmitted by the client device to the server.

Abstract: Methods, systems and programming for data traffic control and encryption. In one example, data traffic is received from a first node to be sent to a second node. The health of an encryption pathway between the first node and the second node is determined. The data traffic is sent to the second node over the network without going through the encryption pathway when the encryption pathway is not healthy.

Abstract: Methods and apparatus for monitoring network links are disclosed. In one implementation, a client device composes a plurality of data packets and transmits the data packets via a network to a server via two or more ports of the client device. The data packets are transmitted via multiple paths across the network. After transmitting the data packets to the server, the client device composes and transmits a control packet to the server, where the control packet indicates a total number of the data packets that have been transmitted by the client device to the server.

Abstract: Methods, systems and programming for data traffic control and encryption. In one example, data traffic is received from a first node to be sent to a second node. The health of an encryption pathway between the first node and the second node is determined. The data traffic is sent to the second node over the network without going through the encryption pathway when the encryption pathway is not healthy.

Abstract: Techniques are described for directing connections between clients and the closest web server. Authoritative DNS resolvers of a network are placed at edges of the network. Using anycast, the authoritative DNS resolvers advertise routes of their destination netblock to the Internet. A request from a client to connect to the network is routed, based upon BGP tables, to the closest particular authoritative DNS resolver. Once the request is received, a response is sent to the client with the IP address of the closest web server. The closest web server is determined through in-network health check measurements, with the authoritative DNS resolvers dynamically selecting IP addresses closest to themselves. Routing protocols that directed the packet to the closest authoritative DNS resolver also dictate the route of subsequent traffic to the network. Thus, the closest web server selected by the authoritative DNS resolver is also the closest web server to the client.

Abstract: Techniques are described for directing connections between clients and the closest web server. Authoritative DNS resolvers of a network are placed at edges of the network. Using anycast, the authoritative DNS resolvers advertise routes of their destination netblock to the Internet. A request from a client to connect to the network is routed, based upon BGP tables, to the closest particular authoritative DNS resolver. Once the request is received, a response is sent to the client with the IP address of the closest web server. The closest web server is determined through in-network health check measurements, with the authoritative DNS resolvers dynamically selecting IP addresses closest to themselves. Routing protocols that directed the packet to the closest authoritative DNS resolver also dictate the route of subsequent traffic to the network. Thus, the closest web server selected by the authoritative DNS resolver is also the closest web server to the client.

Abstract: Techniques are described for directing connections between clients and the closest web server. Authoritative DNS resolvers of a network are placed at edges of the network. Using anycast, the authoritative DNS resolvers advertise routes of their destination netblock to the Internet. A request from a client to connect to the network is routed, based upon BGP tables, to the closest particular authoritative DNS resolver. Once the request is received, a response is sent to the client with the IP address of the closest web server. The closest web server is determined through in-network health check measurements, with the authoritative DNS resolvers dynamically selecting IP addresses closest to themselves. Routing protocols that directed the packet to the closest authoritative DNS resolver also dictate the route of subsequent traffic to the network. Thus, the closest web server selected by the authoritative DNS resolver is also the closest web server to the client.