Abstract: Methods and systems for managing cloud services are disclosed herein. According to various aspects of the disclosure, a number of users of cloud services can be organized in to a plurality of hierarchically organized groups. A feature associated with a cloud resource can then be enabled for a first group of users. An enablement value can then be calculated for a member of a second group of users and the feature can be enabled for that member of the second group of users based on the calculated enablement value.

Abstract: A computing system may include a computing device configured to store and update published resource entitlements for a plurality of client devices. The system may further include a plurality of virtual delivery appliances configured to receive connection requests from the client devices, with the connection requests including a connection lease issued based upon the published resource entitlements for the client devices, request validation of the connection leases from the computing device, and provide the client devices with access to virtual sessions corresponding to the published resource entitlements responsive to validation of connection leases from the computing device. The computing device, responsive to validation requests from the virtual delivery appliances, may also compare the connection leases to the updated published resource entitlements and validate virtual session requests based thereon.

Abstract: Methods and system for power management of computing resources supporting one or more virtual machines involves grouping the plurality of virtual machines into a plurality of groups. The grouping can comprise assigning each of the plurality of virtual machines to one or more of the plurality of groups based on virtual machine functionality. For each group, a further determination is made as to whether the level of activity is indicative of an idle state. Upon determining that the level of activity associated with a group is indicative of an idle state, that group of virtual machines is instructed to enter a low power mode.

Abstract: The embodiments are directed to methods and systems for determining whether a server should be placed in maintenance mode. The methods and systems can create a user group comprising one or more client devices connected to one or more permanently installed applications or one or more virtual desktops hosted on the server. The methods and systems can create a temporary directory containing duplicates of the one or more applications or one or more virtual desktops that the one or more client devices are connected to. The methods and systems can disconnect the one or more client devices from the one or more permanent applications or virtual desktops, and connect the one or more user devices to the one or more duplicate applications or virtual desktops.

Abstract: Secure communications between services or components of a cloud computing system, are facilitated by generating at a first service provided by a first computing entity of a cloud computing system, a request for computing resources, generating at the first computing entity a digital data signature based at least on the request, using a private key associated with the first service; and inserting the digital data signature within an HTTP header associated with the request. A computer data network is used to communicate the request to a second service. The second service extracts the digital data signature and uses a public key to validate the digital data signature.

Abstract: Methods, systems, computer-readable media, and apparatuses may provide for the intermediated retrieval of applications on a network. A computing device may be configured to receive an application from an application server on a network. Based on, for example, the network conditions between the computing device and the application server, the computing device may query a plurality of intermediary servers. Based on a decision that, for example, the network conditions between the computing device, application server, and a selected intermediary server are better than the network conditions between the computing device and the application server, the computing device may cause the application to be retrieved by a host application of the selected intermediary server. The host application may process and transmit the application to the computing device. The computing device may display the processed application and transmit user input corresponding to the processed application to the intermediary server.

Abstract: A virtualization server may include a memory and a processor cooperating therewith to operate a virtual session controller configured to assign virtual sessions to a plurality of different client devices. Each virtual session may be running on a virtual machine from among a plurality of different virtual machines and having a respective user profile associated therewith stored at a cloud computing service, and the cloud computing service may be distributed over a plurality of different geographic locations and configured to store the user profiles and backups thereof at different geographic locations. The controller may further receive the user profiles from the cloud computing service and, as client devices are assigned virtual sessions on different virtual machines, roam the user profiles to the different virtual machines, and synchronize local profile changes during the virtual sessions on different virtual machines back to the user profiles stored at the cloud computing service.

Abstract: A computing system may be in communication with client computing devices. The computing system may include a cloud infrastructure, an offline cache, and a VDA configured to concurrently have a first registration with the cloud infrastructure, and a second registration with the offline cache, and provide corresponding virtual desktop instances for the client computing devices based upon either the first registration or the second registration. The offline cache may be configured to broker local resources for the virtual desktop instances when the cloud infrastructure is unavailable. The VDA may be configured to transition, with no transition delay, to the offline cache using the second registration when the cloud infrastructure is unavailable.

Abstract: Methods, systems, and computer-readable media for creating and managing cloud servers and services using a multi-tenant multi-session catalog with machine-level isolation are described herein. In one or more embodiments, a cloud service provider may receive requests from one or more tenants for predefined numbers of servers. The cloud service provider may initialize a plurality of servers, wherein the plurality of servers is less than a sum of the totality of server requests, and create a catalog of unassigned servers of the plurality of servers. Responsive to a logon request from a user of a tenant, the cloud service provider may assign a server from the catalog of unassigned servers to the tenant, remove the server from the catalog of unassigned servers, broker the user of the tenant to connect to the server, and limit access to the server to only users of the tenant.

Abstract: Aspects of the disclosure relate to using service pool architecture for multitenant services to support canary release. An enterprise canary release server may create a plurality of service pools for a tenant in a cloud-based system that supports a plurality of tenants, where each service pool may comprise a plurality of microservices. The enterprise canary release server may receive a request to perform a canary release for a new version of software and identify a first microservice out of the plurality of microservices in a first service pool. The enterprise canary release server may instantiate a new microservice in the first service pool and enable data plane connectivity between the new microservice and a second microservice. Accordingly, the enterprise canary release server may disable data plane connectivity between the first microservice and the second microservice.

Abstract: Methods and systems for providing bidirectional communications between client devices and server devices are described herein. Server devices in a cluster may bidirectionally communicate with client devices in a resource site via direct connections or virtual connections. One or more server devices may act as intermediate server devices for communications via virtual connections, and may distinguish different types of messages based on header contents of the messages.

Abstract: Methods and systems for tracking tainted connection agents, such as without a trusted central authority, are described herein. During a server outage, a client device may verify that a connection agent is untainted based on a public-key encryption or certificate-based system. If the connection agent is untainted, a server may sign a public key or certificate associated with the connection agent. The server may provide, to the client device, a lease, a public key associated with the server. The connection agent may sign data generated by the client device. The client device may verify a signature of the signed public key, such as based on the public key associated with the server. The client device may verify a signature of the signed data, such as based on the verified public key associated with the connection agent.

Abstract: Methods, systems, computer-readable media, and apparatuses may provide for the intermediated retrieval of applications on a network. A computing device may be configured to receive an application from an application server on a network. Based on, for example, the network conditions between the computing device and the application server, the computing device may query a plurality of intermediary servers. Based on a decision that, for example, the network conditions between the computing device, application server, and a selected intermediary server are better than the network conditions between the computing device and the application server, the computing device may cause the application to be retrieved by a host application of the selected intermediary server. The host application may process and transmit the application to the computing device. The computing device may display the processed application and transmit user input corresponding to the processed application to the intermediary server.

Abstract: A virtualization server may include a memory and a processor cooperating with the memory to operate a virtual session controller. The virtual session controller may be configured to assign virtual sessions to a plurality of different client devices, each virtual session having a respective user profile associated therewith, maintain a respective unique access token associated with each user profile separate from the client devices, relay the access tokens to a cloud computing service, receive the user profiles from the cloud computing service responsive to the unique access tokens, and synchronize with the cloud computing service changes in the user profiles responsive to the user sessions based upon the respective access tokens.

Abstract: A virtual delivery appliance may include a memory and a processor configured to cooperate with the memory to connect client computing devices with virtual computing sessions provided by a host computing device(s) based upon respective connection leases each including an ordered list of virtual delivery appliances, with at least some of the client computing devices having different ordered lists of virtual delivery appliances. Each client computing device may be configured to request a new session from the virtual delivery appliances in the ordered list in descending order until receiving a connection with a new virtual computing session. The processor may be further configured to re-direct new session requests received from the client computing devices to lower virtual delivery appliances in the ordered list when existing virtual computing sessions for the client computing devices are already active with the host computing device(s) associated with the lower virtual delivery appliances.

Abstract: A computing system may be in communication with client computing devices. The computing system may include a cloud infrastructure, an offline cache, and a VDA configured to concurrently have a first registration with the cloud infrastructure, and a second registration with the offline cache, and provide corresponding virtual desktop instances for the client computing devices based upon either the first registration or the second registration. The offline cache may be configured to broker local resources for the virtual desktop instances when the cloud infrastructure is unavailable. The VDA may be configured to transition to the offline cache using the second registration when the cloud infrastructure is unavailable.

Abstract: Methods and systems for providing bidirectional communications between client devices and server devices are described herein. Server devices in a cluster may bidirectionally communicate with client devices in a resource site via direct connections or virtual connections. One or more server devices may act as intermediate server devices for communications via virtual connections, and may distinguish different types of messages based on header contents of the messages.

Abstract: Methods and systems for tracking tainted connection agents, such as without a trusted central authority, are described herein. During a server outage, a client device may verify that a connection agent is untainted based on a public-key encryption or certificate-based system. If the connection agent is untainted, a server may sign a public key or certificate associated with the connection agent. The server may provide, to the client device, a lease, a public key associated with the server. The connection agent may sign data generated by the client device. The client device may verify a signature of the signed public key, such as based on the public key associated with the server. The client device may verify a signature of the signed data, such as based on the verified public key associated with the connection agent.

Abstract: A technique provides access to content within a computing environment. The technique involves identifying a network address to a resource which is currently blocked from being accessed via the network address due to operation of a content filter. The technique further involves, based on previously accessed content, modifying the operation of the content filter to unblock access to the resource via the network address. The technique further involves, after the operation of the content filter is modified to unblock access to the resource via the network address, permitting access to the resource via the network address.

Abstract: A computer system may include at least one client computing device, and a plurality of host computing devices each configured to provide virtual computing sessions for the at least one client computing device. Each host computing device may have a virtual delivery agent (VDA) associated therewith configured to connect the at least one client computing device with the virtual computing sessions. The at least one client computing device may be configured to request virtual computing sessions from the VDAs in accordance with an ordered list of the VDAs. The VDAs may be configured to re-direct new session requests from the at least one client computing device to a lower VDA in the ordered list when an existing virtual computing session is already active with the host computing device associated with the lower VDA.