Abstract: A disclosed method facilitates communications between an edge device and a cloud-based service component via an enterprise proxy without configuring the enterprise proxy to allow access to a service domain associated with the cloud-based service component. The method includes receiving, at a first proxy on the edge device, a service domain connection request from the service agent that specifies a service domain associated with the cloud-based service component. The first proxy responds to the first connection request by transmitting a sequence of nested connection requests including an inner connection request and an outer connection request. The inner connection request establishes a first communication channel between the first proxy and a cloud-based gateway. The outer connection request is transmitted along the first communication channel and establishes a second communication channel between the cloud-based gateway and the service domain requested by the service agent.

Abstract: A computer implemented method includes generating a first call to an external resource by a first resource in a low layer of a multi-layer network of resources, forwarding the first call though successive multiple layers via a call a forwarder in each layer to an edge proxy in each adjacent higher layer, and establishing a connection to the external resource via a top layer having direct external network access without using domain name servers in layers lower than the top layer.

Abstract: A computer implemented method includes generating a call to an external endpoint from a resource in a first layer of a multi-layer air-gapped network of resources, obtaining metadata that includes a list of external resource endpoints to be whitelisted, the metadata being obtained by a watcher of an edge proxy in each layer, via a data plane service, and generating, via each edge proxy, a dummy certificate for the external endpoints to create trust between edge proxies at adjacent layers in the air-gapped network.

Abstract: Systems, methods, and computer program products for preemption in asynchronous systems using anti-tokens are disclosed. According to one aspect, configurable system for constructing asynchronous application specific integrated data pipeline circuits with preemption includes a plurality of modular circuit stages that are connectable with each other and with other circuit elements to form multi-stage asynchronous application specific integrated data pipeline circuits for asynchronously sending data and tokens in a forward direction through the pipeline and for asynchronously sending anti-tokens in a backward direction through the pipeline. Each stage is configured to perform a handshaking protocol with other pipeline stages, the protocol including receiving either a token from the previous stage or an anti-token from the next stage, and in response, sending both a token forward to the next stage and an anti-token backward to the previous stage.

Abstract: Systems, methods, and computer program products for preemption in asynchronous systems using anti-tokens are disclosed. According to one aspect, configurable system for constructing asynchronous application specific integrated data pipeline circuits with preemption includes a plurality of modular circuit stages that are connectable with each other and with other circuit elements to form multi-stage asynchronous application specific integrated data pipeline circuits for asynchronously sending data and tokens in a forward direction through the pipeline and for asynchronously sending anti-tokens in a backward direction through the pipeline. Each stage is configured to perform a handshaking protocol with other pipeline stages, the protocol including receiving either a token from the previous stage or an anti-token from the next stage, and in response, sending both a token forward to the next stage and an anti-token backward to the previous stage.