Abstract: A system and method is disclosed for moving between delay sensing and packet loss based congestion control states. In connection with communicating over a network by sending and receiving data, one or more network devices automatically selects between a first and a second congestion control state for the sending and receiving of the data based a predetermined algorithm. The devices move between the first and the second congestion control states to maintain a bit rate associated with the sending and receiving at a predetermined threshold according to the predetermined algorithm.

Abstract: Systems, methods, and machine-readable media for low latency server-side redirection of User Datagram Protocol (UDP)-based transport protocols traversing a client-side Network Address Translation (NAT) are provided. A request may be sent from a client for a data resource to a first server. The data resource may be received from a second server that has not been previously connected to the client. Receiving the data resource from the second server may be facilitated by the first server through redirecting the request to the second server and providing for the second server to connect to the client and directly respond to the request. The first server may lack at least one of the requested data resource or resources for providing the requested data resource.

Abstract: Methods for network fallback using resource request expectations are provided. In one aspect, a method includes receiving a resource request, the resource request including one or more request expectations. The method also includes sending the resource request to a hostname via a first network connection. The method also includes evaluating network activity in response to the sent resource request. The method also includes resending the resource request to the hostname via a second network connection based on the evaluated network activity and the one or more request expectations. Systems and machine-readable media are also provided.

Abstract: Methods for probabilistically expediting secure connections via connection parameter reuse are provided. In one aspect, a method includes determining whether a client had previously established a secure connection with a hostname. The method also includes obtaining a source identifier used by the client to establish the previous secure connection when it is determined that the client previously established the previous secure connection with the hostname. The method also includes sending a request to the hostname for a new secure connection based on the obtained source identifier. Systems and machine-readable media are also provided.

Abstract: A system and machine-implemented method for communicating with a client device. A server receives a first request by a client device via a first communication protocol, wherein the first request establishes a NAT binding which defines a communication path from a server to the client device. The server sends a response to the received first request via the first communication protocol, wherein the response is directed to the client device based on the NAT binding. The server determines that the response is unsuccessful in reaching the client device. In response to the determination, the server transmits a communication to the client device via a second communication protocol which is different than the first communication protocol, wherein the communication instructs the client device to re-establish the NAT binding.

Abstract: Systems, methods, and machine-readable media for low latency server-side redirection of User Datagram Protocol (UDP)-based transport protocols traversing a client-side Network Address Translation (NAT) are provided. At a first server, a request for directing a data resource to a client may be received. The request may be received from the client or a back-end server trying to push the data resource to the client. The first server may lack the data resource or the resources to provide the data resource to the client. A second server may be determined for responding to the request. The request may be redirected to the second server. The first server may provide for the second server to connect to the client and directly respond to the request. The second server may have not been previously connected to the client.

Abstract: Aspects of the subject technology relate to systems, methods, and machine-readable media for communicating using adaptive data compression. A system is configured to compare operation of an encrypted communications channel to at least one operational threshold for the encrypted communications channel and select a level of compression for the encrypted communications channel based on the comparing. The system is further configured to compress data packets to be transmitted over the encrypted communications channel in accordance with the level of compression, encrypt the data packets, and transmit, via a network, the encrypted and compressed data packets to a destination.

Abstract: The subject technology discloses configurations for receiving, at a first network device, a set of network packets corresponding to a first flow from a client, wherein the set of network packets includes a destination address of a second network device; detecting, in the received set of network packets, pacing rate information indicating a specified pacing rate for transmission of the network packets; determining, based on the detected pacing rate, a desired pacing rate to reduce packet dropping on route to the second network device; and transmitting, by the first network device, the set of network packets over an egress link at the desired pacing rate.

Abstract: Systems and methods for generating profiling data include monitoring the execution of a task on a thread of a program. Profiling data may be generated that includes metrics regarding the execution of the task. A profiling data aggregation service may aggregate generated profiling data from a plurality of devices that execute the program.

Abstract: Systems and methods for resolving a request associated with a host expression to an Internet Protocol (IP) address are provided. In some aspects, a request for content from a content server is transmitted from a client computing device. The request is associated with a host expression of the content server. A message including the requested content and an indication of an Internet Protocol (IP) address set of a DNS resolution of the host expression of the content server is received in response to the request. The requested content includes text or an image. The IP address set of the DNS resolution of the host expression of the content server is stored in a local memory of the client computing device. The IP address set is stored for resolution of future requests associated with the host expression of the content server locally at the client computing device.

Abstract: The invention generates a temporary digital certificate with a useful life of only a few minutes to a few hours. An expiration time is attached to such temporary digital certificate by a secure computer platform that is presented with a user's smart-card. Expiration dates one or two years after the issuance of the smart-card are conventional. A digital certificate issued by a central authority is carried within the smart card and is used by the secure computer platform to generate temporary digital certificate. The temporary digital certificate functions as a proxy digital certificate that will allow the user to immediately pocket the smart card and thus avoid the possibility of forgetting it in a card reader.

Abstract: The invention generates a temporary digital certificate with a useful life of only a few minutes to a few hours. An expiration time is attached to such temporary digital certificate by a secure computer platform that is presented with a user's smart-card. Expiration dates one or two years after the issuance of the smart-card are conventional. A digital certificate issued by a central authority is carried within the smart card and is used by the secure computer platform to generate temporary digital certificate. The temporary digital certificate functions as a proxy digital certificate that will allow the user to immediately pocket the smart card and thus avoid the possibility of forgetting it in a card reader.