Abstract: Aspects of the subject technology relate to a method for identifying a data stream. In some implementations, the method can include steps for generating a first globally-unique identifier (GUID), associating the first GUID with a first data stream comprising a first plurality of data packets and sending each of the first plurality of data packets to a remote device. In certain aspects, the method can also include steps for receiving a second plurality of data packets from the remote device, wherein each of the second plurality of data packets comprises a second GUID and comparing the second GUID with the first GUID to determine if the second plurality of data packets is associated with the first data stream. Systems and machine-readable media are also provided.

Abstract: Systems, methods, and machine-readable media for low latency server-side redirection of User Datagram Protocol (UDP)-based transport protocols traversing a client-side Network Address Translation (NAT) are provided. A request may be sent from a client for a data resource to a first server. The data resource may be received from a second server that has not been previously connected to the client. Receiving the data resource from the second server may be facilitated by the first server through redirecting the request to the second server and providing for the second server to connect to the client and directly respond to the request. The first server may lack at least one of the requested data resource or resources for providing the requested data resource.

Abstract: Systems and methods for resolving a request associated with a host expression to an Internet Protocol (IP) address are provided. In some aspects, a request for content from a content server is transmitted from a client computing device. The request is associated with a host expression of the content server. A message including the requested content and an indication of an Internet Protocol (IP) address set of a DNS resolution of the host expression of the content server is received in response to the request. The requested content includes text or an image. The IP address set of the DNS resolution of the host expression of the content server is stored in a local memory of the client computing device. The IP address set is stored for resolution of future requests associated with the host expression of the content server locally at the client computing device.

Abstract: Methods for probabilistically expediting secure connections via connection parameter reuse are provided. In one aspect, a method includes determining whether a client had previously established a secure connection with a hostname. The method also includes obtaining a source identifier used by the client to establish the previous secure connection when it is determined that the client previously established the previous secure connection with the hostname. The method also includes sending a request to the hostname for a new secure connection based on the obtained source identifier. Systems and machine-readable media are also provided.

Abstract: A first computing device receives a first token with a first request for data from a second computing device located at a first network address, the first token being associated with a second network addresses previously associated with the second computing device during previous communications with the first computing device. The first computing device determines that the first token is not associated with the first network address, and generates a second token for the computing device. The second token is associated with the first network address and the second network address. The first computing device then provides the second token to the computing device for use in establishing future network communications from the first network address and from the second network address.

Abstract: The subject technology discloses configurations for receiving, at a first network device, a set of network packets corresponding to a first flow from a client, wherein the set of network packets includes a destination address of a second network device; detecting, in the received set of network packets, pacing rate information indicating a specified pacing rate for transmission of the network packets; determining, based on the detected pacing rate, a desired pacing rate to reduce packet dropping on route to the second network device; and transmitting, by the first network device, the set of network packets over an egress link at the desired pacing rate.

Abstract: A system and machine-implemented method for communicating with a client device. A server receives a first request by a client device via a first communication protocol, wherein the first request establishes a NAT binding which defines a communication path from a server to the client device. The server sends a response to the received first request via the first communication protocol, wherein the response is directed to the client device based on the NAT binding. The server determines that the response is unsuccessful in reaching the client device. In response to the determination, the server transmits a communication to the client device via a second communication protocol which is different than the first communication protocol, wherein the communication instructs the client device to re-establish the NAT binding.

Abstract: Systems, methods, and machine-readable media for low latency server-side redirection of User Datagram Protocol (UDP)-based transport protocols traversing a client-side Network Address Translation (NAT) are provided. A request may be sent from a client for a data resource to a first server. The data resource may be received from a second server that has not been previously connected to the client. Receiving the data resource from the second server may be facilitated by the first server through redirecting the request to the second server and providing for the second server to connect to the client and directly respond to the request. The first server may lack at least one of the requested data resource or resources for providing the requested data resource.

Abstract: Systems, methods, and machine-readable media for low latency server-side redirection of User Datagram Protocol (UDP)-based transport protocols traversing a client-side Network Address Translation (NAT) are provided. A request may be sent from a client for a data resource to a first server. The data resource may be received from a second server that has not been previously connected to the client. Receiving the data resource from the second server may be facilitated by the first server through redirecting the request to the second server and providing for the second server to connect to the client and directly respond to the request. The first server may lack at least one of the requested data resource or resources for providing the requested data resource.

Abstract: Methods for lower latency connections using speculative DNS resolution are provided. In one aspect, a method includes receiving a request at a client for a web resource to be sent to a hostname. The method also includes obtaining a speculative Domain Name System (DNS) resolution of the hostname from a source local to the client. The method also includes initiating a connection to the hostname using the obtained speculative DNS resolution of the hostname. Systems and machine-readable media are also provided.

Abstract: A method, system and computer-readable medium for establishing secure connections using compressed cryptographic chaining certificates, the method including receiving a first compact representation corresponding to a certificate for validating a first entity at a second entity, retrieving a local list of one or more compact representations corresponding to one or more certificates locally available to the second entity, comparing the first compact representation to the one or more compact representations within the local list, determining if the first compact representation matches at least one of the one or more compact representations, retrieving the certificate corresponding to the at least one of the one or more compact representations if the first compact representation matches the at least one of the one or more compact representations and validating the first entity using the retrieved certificate corresponding to the at least one of the one or more compact representations.

Abstract: A system and method for facilitating packet loss recovery using an intermediary are provided. The system includes a first node configured to transmit a plurality of data packets, a second node configured to receive the plurality of data packets and a third node configured to act as an intermediary between the first node and the second node and is configured to receive one or more packets of the plurality of data packets transmitted from the first node to the second node before the one or more packets are transmitted to the second node, and determine if a packet loss event has occurred, wherein a packet loss event occurs if a first packet of the plurality of packets is lost during transmission from the first node to the second node and take an action with respect to the first packet if it determined that a packet loss event has occurred.

Abstract: Aspects of the subject technology relate to systems, methods, and machine-readable media for communicating using adaptive data compression. A system is configured to compare operation of an encrypted communications channel to at least one operational threshold for the encrypted communications channel and select a level of compression for the encrypted communications channel based on the comparing. The system is further configured to compress data packets to be transmitted over the encrypted communications channel in accordance with the level of compression, encrypt the data packets, and transmit, via a network, the encrypted and compressed data packets to a destination.

Abstract: Methods for network fallback using resource request expectations are provided. In one aspect, a method includes receiving a resource request, the resource request including one or more request expectations. The method also includes sending the resource request to a hostname via a first network connection. The method also includes evaluating network activity in response to the sent resource request. The method also includes resending the resource request to the hostname via a second network connection based on the evaluated network activity and the one or more request expectations. Systems and machine-readable media are also provided.

Abstract: Aspects of the subject technology relate to a method for identifying a data stream. In some implementations, the method can include steps for generating a first globally-unique identifier (GUID), associating the first GUID with a first data stream comprising a first plurality of data packets and sending each of the first plurality of data packets to a remote device. In certain aspects, the method can also include steps for receiving a second plurality of data packets from the remote device, wherein each of the second plurality of data packets comprises a second GUID and comparing the second GUID with the first GUID to determine if the second plurality of data packets is associated with the first data stream. Systems and machine-readable media are also provided.

Abstract: The subject technology discloses configurations for receiving, at a first network device, a set of network packets corresponding to a first flow from a client, wherein the set of network packets includes a destination address of a second network device; detecting, in the received set of network packets, pacing rate information indicating a specified pacing rate for transmission of the network packets; determining, based on the detected pacing rate, a desired pacing rate to reduce packet dropping on route to the second network device; and transmitting, by the first network device, the set of network packets over an egress link at the desired pacing rate.

Abstract: A method for verifying receipt of data packets, including generating a plurality of data packets, wherein each of the plurality of data packets comprises entropy information, transmitting one or more of the plurality of data packets to a receiver, receiving a first hash from the receiver, wherein the first hash is based on the entropy information of the one or more of the plurality of data packets and validating the first hash to determine if the receiver received the one or more of the plurality of data packets. Systems and computer-readable media are also provided.

Abstract: Aspects of the subject technology relate to a method for identifying a data stream. In some implementations, the method can include steps for generating a first globally-unique identifier (GUID), associating the first GUID with a first data stream comprising a first plurality of data packets and sending each of the first plurality of data packets to a remote device. In certain aspects, the method can also include steps for receiving a second plurality of data packets from the remote device, wherein each of the second plurality of data packets comprises a second GUID and comparing the second GUID with the first GUID to determine if the second plurality of data packets is associated with the first data stream. Systems and machine-readable media are also provided.

Abstract: The subject technology discloses configurations for receiving, at a first network device, a set of network packets corresponding to a first flow from a client, wherein the set of network packets includes a destination address of a second network device; detecting, in the received set of network packets, pacing rate information indicating a specified pacing rate for transmission of the network packets; determining, based on the detected pacing rate, a desired pacing rate to reduce packet dropping on route to the second network device; and transmitting, by the first network device, the set of network packets over an egress link at the desired pacing rate.

Abstract: Methods for probabilistically expediting secure connections via connection parameter reuse are provided. In one aspect, a method includes determining whether a client had previously established a secure connection with a hostname. The method also includes obtaining a source identifier used by the client to establish the previous secure connection when it is determined that the client previously established the previous secure connection with the hostname. The method also includes sending a request to the hostname for a new secure connection based on the obtained source identifier. Systems and machine-readable media are also provided.