Abstract: A system and method of implementing a virtual channel virtual private network is disclosed. In one embodiment, a remote desktop protocol (RDP) client is connected to a RDP server. The RDP client requests a virtual connection to a first computing device. A virtual channel for the RDP connection is created. A client application or client gateway is bound to the first virtual channel at the RDP client. The RDP server establishes a connection to a server application or a server gateway, and binds the connection to the first virtual channel.

Abstract: In particular embodiments, a first computing device may receive a request from a second computing device to access a first entity of an infrastructure, the second computing device being coupled to the first computing device, then determining an eligibility of the second computing device to access as least the first entity of the infrastructure, and if the second computing device is determined to be eligible to access the first entity, then assigning a second ticket to the second computing device responsive to the received request.

Abstract: In particular embodiments, a first computing device may receive a request from a software to access information of a remote device of a client device, the client device being coupled to the first computing device, and access the information of the remote device based at least on a virtual interface of the remote device, and send, responsive to the received request, the accessed information to the software.

Abstract: A system and method of client side redirection with pluggable authentication and authorization is disclosed. In a particular embodiment, an operating system of a first computing device receives a request to cause remote desktop protocol (RDP) client device to connect to a second computing device. The client is coupled to the first computing device via a first RDP connection. The first computing device may use information associated with the first RDP connection to qualify the client to connect to the second computing device. If qualified, first computing device may send a redirect instruction to the client that redirects the client from the first computing device to the second computing device. The first computing device may send credentials to the client for use in establishing a second RDP connection to the second computing device. The redirect instruction and credentials may be sent via a virtual channel of the first RDP connection.

Abstract: A system and method of client side redirection is disclosed. A remote desktop protocol (RDP) client device establishes a first RDP connection to a first computing device. The client receives, from the first computing device, information associated with a second computing device via a virtual channel of the first RDP connection. The information indicates that the client should perform a redirect from the first computing device to the second computing device. In response to the information, the client closes the first RDP connection and establishes a second RDP connection from the client to the second computing device based at least on the information corresponding to the second computing device. The second RDP connection provides access for the client to communicate with the second computing device.

Abstract: In particular embodiments, a client device may established a first connection to a ticket server of a gateway, wherein the gateway couples the client device to a first computing device, retrieve a permission vector from the ticket server though the first connection, wherein the retrieved permission vector contains at least one or more tickets to authenticate and authorize the client device access to at least the gateway and the first computing device, and establish a second connection to the first computing device based at least on the retrieved tickets

Abstract: In particular embodiments, a computing device may receive device data from a client device. The computing device may encode the data for transmission to a remote desktop client. The re-encoding may be performed according to a pre-defined import/export protocol.

Abstract: In particular embodiments, a method includes, by a computing device, receiving a connection from a client and assigning the client a unique socket. The method further includes launching a generic transcoding service attached to a runtime library, and the runtime library may be able to intercept system calls from a specific instance of an application executing on a remote client for exporting to the client. The method further includes receiving a termination of the connection by the client and updating load-balancing information.

Abstract: In particular embodiments, a method includes receiving, by a computing device including an import/export framework, encoded client data. The client data may be encoded by a generic transcoding service. The method includes performing load-balancing based at least in part on the client data, authorizing the client's access of a remote application, and exporting the encoded client data to the remote application.

Abstract: In particular embodiments, a method includes receiving, by a computing device including an import/export framework, encoded client data. The client data may be encoded by a generic transcoding service. The method includes performing load-balancing based at least in part on the client data, authorizing the client's access of a remote application, and exporting the encoded client data to the remote application.

Abstract: Computer-implemented method is disclosed. Method includes defining, at one or more computing devices, first client-server communication protocol for communication between client side and server side. First client-server communication protocol is application layer protocol in OSI model. Method also includes defining connection for client side associated with first client-server communication protocol. Method also includes defining data sink for first client-server communication protocol. Data sink is external to client side and external to server side. Data sink is configured to receive and process output of client side or server side. Method also includes defining data source for first client-server communication protocol. Data source is external to client side and external to server side. Data source is configured to provide input for client side or server side.

Abstract: A method for managing a session between a local computing device and a remote computing device, in which a session is established between a local computing device and a remote computing device, a lock session signal is transmitted from the remote computing device to the local computing device, a lock session signal is received at the local computing device, and the session is locked, at the local computing device. Furthermore, the user is prompted for identification information at the remote computing device, and the identification information is transmitted from the remote computing device to the local computing device. Moreover, the identification information is received at the local computing device, the identification information is authenticated at the local computing device, and the session is unlocked, at the local computing device.

Abstract: Systems and methods for providing a virtual machine client administrative interface are provided. In some aspects, a method includes providing for display of a virtual machine creation console via operation of a virtual machine hosting environment, the virtual machine creation console indicating a set of predetermined available resources for virtual machine creation. The method includes facilitating receiving, from a user, an input via the virtual machine creation console, the input defining a portion of the set of predetermined available resources and one or more virtual machines to be created with the portion of the set of predetermined available resources. The method includes facilitating creating the one or more virtual machines.

Abstract: In particular embodiments, a computing device establishes a remote desktop connection with a remote host, the remote desktop connection including one or more dynamic virtual channels. The computing device receives from one or more sensors an indication that the computing device has been rotated to a new orientation. The computing device sends to the remote host, via one of the dynamic virtual channels, information associated with the new orientation. The computing device receives from the remote host graphical data based at least in part on the information associated with the new orientation and provides for display the graphical data.

Abstract: In particular embodiments, a method includes receiving a first connection from a client and assigning the client a unique socket. The method further includes selecting, from a plurality of execution hosts, a first execution host for the first connection based at least in part on load-balancing information associated with the execution hosts. Each execution host includes a unique general client engine. The method further includes launching a first transcoding remote desktop client instance at the first execution host in association with the general client engine of the first execution host. The method further includes receiving a second connection from the client, the second connection being associated with the unique socket of the first connection, launching a second transcoding remote desktop client instance at the first execution host in association with the general client engine of the first execution host, and updating the load-balancing information.

Abstract: In particular embodiments, a method includes receiving from an application a first graphics device interface (GDI) call and adding the first GDI call to a list of events. The method further includes receiving from the application one or more second GDI calls, wherein each of the second GDI calls is related to the first GDI call and adding the second GDI calls to the list of events. The method further includes receiving from the application a third GDI call, wherein the third GDI call is not related to the first GDI call, and performing a call to a GDI system, the call including the list of events.

Abstract: In particular embodiments, a method includes receiving a first connection from a client and assigning the client a first communication pathway. The method further includes launching a transcoding remote desktop client and receiving a second connection from the client, where the second connection includes a reference identifier. The method further includes determining whether the reference identifier is associated with the transcoding remote desktop client. If so, the method includes accepting the second connection, assigning the second connection to a second communication pathway, and relating the second communication pathway to the transcoding remote desktop client. If not, the method includes refusing the second connection.

Abstract: In particular embodiments, a method includes, by a computing device, receiving a connection from a client and assigning the client a unique socket. The method further includes launching a generic transcoding service attached to a runtime library, and the runtime library may be able to intercept system calls from a specific instance of an application executing on a remote client for exporting to the client. The method further includes receiving a termination of the connection by the client and updating load-balancing information.

Abstract: A method for managing a session between a local computing device and a remote computing device, in which a session is established between a local computing device and a remote computing device, a lock session signal is transmitted from the remote computing device to the local computing device, a lock session signal is received at the local computing device, and the session is locked, at the local computing device. Furthermore, the user is prompted for identification information at the remote computing device, and the identification information is transmitted from the remote computing device to the local computing device. Moreover, the identification information is received at the local computing device, the identification information is authenticated at the local computing device, and the session is unlocked, at the local computing device.

Abstract: In particular embodiments, an HTML-compatible client device loads an HTML script. The client device executes the HTML script with a Native Client specification. The client device receives user information specifying a connection. The client device creates a port forward or a tunnel device, and connects to a target host through the port forward or the tunnel device.