Abstract: In various embodiments, a computer-implemented method comprises connecting, by a transceiver of a node, to a first network sector of a plurality of network sectors using a first antenna pattern, wherein the first network sector corresponds to a first carrier network of a plurality of carrier networks, a connection with the first network sector having a first signal strength, identifying, by a connectivity management service operating on the node, a second network sector of the plurality of network sectors, and modifying, by the connectivity management service based on the second network sector, the transceiver from using the first antenna pattern to using a second antenna pattern, where a second signal strength of the second network sector is expected to be higher than the first signal strength when using the second antenna pattern, and where the second antenna pattern causes the node to select the second network sector.

Abstract: Various embodiments disclose a connectivity management service that identifies an estimated capacity for a first network sector corresponding to a first carrier network, measures average latency for the network sector based on endpoint devices that communicate using the network sector, determines an actual available capacity for the network sector based on the average latency and the estimated capacity, and transmits instructions for an endpoint device of the endpoint devices to change from the first network sector to a second network sector.

Abstract: In various embodiments, a method comprises acquiring, by a connectivity management service executing on an endpoint device, performance metrics for a plurality of network sectors, where the performance metrics include at least one of a latency, a capacity, or packet reliability, selecting, by the connectivity management service and based at least on the performance metrics and additional performance metrics, a first network sector of the plurality of network sectors, and causing, by the connectivity management service, the endpoint device to connect to the first network sector.

Abstract: Various embodiments disclosed herein provide techniques for managing encryption keys at nodes in a mesh network. In various embodiments, a method includes, during a key failure detection time period associated with a first key, counting, by a node in a mesh network using a failure counter, one or more decryption failures using the first key; while in a key update time period and in response to detecting a decryption failure using the first key, determining, by the node, that the failure counter is above a threshold; and in response to determining that the failure count is above the threshold, transmitting, by the node to a key management service, a request for an update to the first key.

Abstract: Various embodiments disclosed herein provide techniques for messaging among message groups associated with agents executing on nodes of a mesh network. A messaging application executing on a node of the mesh network performs operations including receiving a request from an agent executing on the first node to join a message group; in response to determining that the agent is permitted to join the message group, adding the agent to the message group; and delivering one or more messages associated with the message group between the agent and one or more other agents that are members of the messaging group.

Abstract: Various embodiments disclosed herein provide techniques for messaging among message groups associated with agents executing on nodes of a mesh network. A messaging application executing on a node of the mesh network receives a request from an agent executing on the first node to join a message group; verifies that a policy permits the agent to join the message group; adds the agent to the message group; receives, from the agent, content for a message for the message group; and transmits the message to a second messaging application of a second node of the mesh network for delivery to an agent that is executing on the second node and that is included in the message group. In various embodiments, the messaging application receives, from another node of the mesh network, a second message for the message group, and delivers content from the second message to the agent.

Abstract: Various embodiments disclosed herein provide techniques for managing encryption keys at nodes in a mesh network. In various embodiments, a method includes receiving, by a first node in a network, a first message from a second node; determining, by the first node, that a first key usable by the first node to decrypt the first message is outdated based on a comparison of a first key version identifier associated with the first key and a second key version identifier associated with a second key, where the second key was used to encrypt the first message, and the second key version identifier is received from the second node with the first message; and in response to determining that the first key is outdated, transmitting, by the first node to a key management service, a first request for an updated version of the first key to replace the first key.

Abstract: Various embodiments disclosed herein provide techniques for managing encryption keys at nodes in a mesh network. In various embodiments, a method includes, while in a key failure detection time period associated with a first key, detecting, by a node in a mesh network, a decryption failure using the first key; in response to detecting the decryption failure using the first key, incrementing, by the node, a failure count for the first key; and in response to determining that the failure count is at least a threshold count and a key update time period has been entered, transmitting, by the node to a key management service, a request for an update to the first key.

Abstract: Various embodiments disclosed herein provide techniques for managing encryption keys at nodes in a mesh network. In various embodiments, a method includes, while in a key failure detection time period associated with a first key, detecting, by a node in a mesh network, a decryption failure using the first key; in response to detecting the decryption failure using the first key, incrementing, by the node, a failure count for the first key; and in response to determining that the failure count is at least a threshold count and a key update time period has been entered, transmitting, by the node to a key management service, a request for an update to the first key.

Abstract: Various embodiments disclosed herein provide techniques for messaging among message groups associated with agents executing on nodes of a mesh network. A messaging application executing on a node of the mesh network receives a request from an agent executing on the first node to join a message group; verifies that a policy permits the agent to join the message group; adds the agent to the message group; receives, from the agent, content for a message for the message group; and transmits the message to a second messaging application of a second node of the mesh network for delivery to an agent that is executing on the second node and that is included in the message group. In various embodiments, the messaging application receives, from another node of the mesh network, a second message for the message group, and delivers content from the second message to the agent.

Abstract: Various embodiments disclosed herein provide techniques for messaging among agents executing on nodes a mesh network. In various embodiments, a method includes receiving, by a messaging application executing on a node of a mesh network, content for a message from an agent executing on the node; verifying, by the messaging application, that a policy permits delivery of the message; and transmitting, by the messaging application, the message to another messaging application executing on another node of the mesh network.

Abstract: Various embodiments disclosed herein provide techniques for managing encryption keys at nodes in a mesh network. In various embodiments, a method includes receiving, by a first node in a network, a first message from a second node; determining, by the first node, that a first key usable by the first node to decrypt the first message is outdated based on a comparison of a first key version identifier associated with the first key and a second key version identifier associated with a second key, where the second key was used to encrypt the first message, and the second key version identifier is received from the second node with the first message; and in response to determining that the first key is outdated, transmitting, by the first node to a key management service, a first request for an updated version of the first key to replace the first key.

Abstract: Various embodiments disclosed herein provide techniques for messaging among message groups associated with agents executing on nodes of a mesh network. A messaging application executing on a node of the mesh network receives content for a first message from an agent executing on the first node, the first message being for a first message group; and transmits a composite message to a second messaging application executed by a second node of the mesh network, the composite message including the first message and a second message for a second message group.

Abstract: Techniques are directed to controlling access to resources on a message bus of a network communication device. The techniques may include, by the network communication device, processing a message bus access policy file uniquely corresponding to a process. The message bus access policy file may include a certificate securely associating the message bus access policy file with the process. The techniques may further include, by the network communication device, based at least in part on the processing the message bus access policy file, exposing one or more resources of the network communication device to the process on the message bus, in a manner corresponding to at least one resource access permission indication contained within the message bus access policy file.

Abstract: Techniques are directed to controlling access to resources on a message bus of a network communication device. The techniques may include, by the network communication device, processing a message bus access policy file uniquely corresponding to a process. The message bus access policy file may include a certificate securely associating the message bus access policy file with the process. The techniques may further include, by the network communication device, based at least in part on the processing the message bus access policy file, exposing one or more resources of the network communication device to the process on the message bus, in a manner corresponding to at least one resource access permission indication contained within the message bus access policy file.

Abstract: Techniques are directed to controlling access to resources on a message bus of a network communication device. The techniques may include, by the network communication device, processing a message bus access policy file uniquely corresponding to a process. The message bus access policy file may include a certificate securely associating the message bus access policy file with the process. The techniques may further include, by the network communication device, based at least in part on the processing the message bus access policy file, exposing one or more resources of the network communication device to the process on the message bus, in a manner corresponding to at least one resource access permission indication contained within the message bus access policy file.

Abstract: Techniques are directed to controlling access to resources on a message bus of a network communication device. The techniques may include, by the network communication device, processing a message bus access policy file uniquely corresponding to a process. The message bus access policy file may include a certificate securely associating the message bus access policy file with the process. The techniques may further include, by the network communication device, based at least in part on the processing the message bus access policy file, exposing one or more resources of the network communication device to the process on the message bus, in a manner corresponding to at least one resource access permission indication contained within the message bus access policy file.