Abstract: A method of data bandwidth overhead reduction in a protocol based communication over a Wide Area Network (WAN) includes transmitting, through a sender device of a source location, data packets of a sequence to a receiver device of a destination location communicatively coupled to the sender device through the WAN and storing a copy of the transmitted data packets in the sender device for a first threshold duration of time. When the receiver device receives a non-consecutive data packet, the receiver device waits for a second threshold period of time before transmitting a NAK message to the sender device related to non-receipt of one or more out-of-order data packet(s). The sender device interprets the NAK message and retransmits the one or more out-of-order data packet(s) to the receiver device after which the one or more out-of-order data packets are removed.

Abstract: Disclosed are a method and/or a system for defining logical channels and channel policies in an application acceleration environment. In one aspect, a system includes a branch site including a branch client. A headquarters site includes a headquarters server, the branch site and the headquarters site are communicatively coupled over a logical link via a transmission media. A first point of presence (POP) is communicatively coupled with a branch customer premise equipment (CPE) located at the branch site over a first segment of the logical link. A second POP is communicatively coupled with the first POP over a second segment of the logical link. Each segment of the logical link is constructed from a physical link and contains two segment endpoints. The physical link carries a network traffic of the network connection between the two segment endpoints of an associated segment.

Abstract: A method is provided for establishing a split-terminated secure communication connection between a client and a server. A first network intermediary intercepts a secure communication connection request directed from the client to the server. A second intermediary having a digital certificate in the name of the server (and a corresponding private key) acts in place of the server to establish a first secure communication session with the client, during which it receives a secret from the client for generating the session key. The second intermediary supplies the secret and/or the session key to the first intermediary, which allows the first intermediary to establish follow-on secure communication sessions in which the secret is reused. The second intermediary may also supply the first intermediary with a copy of its certificate so that it can respond to new secure communication requests and, yet further, may also supply a copy of the private key.

Abstract: A method is provided for establishing a split-terminated secure communication connection between a client and a server. A first network intermediary intercepts a secure communication connection request directed from the client to the server. A second intermediary having a digital certificate in the name of the server (and a corresponding private key) acts in place of the server to establish a first secure communication session with the client, during which it receives a secret from the client for generating the session key. The second intermediary supplies the secret and/or the session key to the first intermediary, which allows the first intermediary to establish follow-on secure communication sessions in which the secret is reused. The second intermediary may also supply the first intermediary with a copy of its certificate so that it can respond to new secure communication requests and, yet further, may also supply a copy of the private key.

Abstract: A network intermediary device such as a transaction accelerator intercepts a client request for a secure communication connection with a server. The intermediary issues a substitute connection request to the server and receives a digital certificate during establishment of a secure communication session between the intermediary and the server. Based on information in the received digital certificate, the intermediary selects an appropriate operational configuration for responding to the client's request. The intermediary consults an ordered list or other collection of digital certificates it possesses, and chooses one having a common name that matches the server's common name. The match may comprise the first matching name, the longest match, the best match, the broadest match (e.g., a certificate having a name that includes one or more wildcard characters), etc. The intermediary then uses the selected certificate (and corresponding private key) to establish a secure communication session with the client.