Abstract: The systems and methods discussed herein provide for a predictive monitoring technique to suppress data exchange between the client device or devices and the monitoring device or devices. Regression-based intelligent predictions systems executed both by the client device or devices and the monitoring device or devices perform identical prediction algorithms. If the predicted metric values and the actual measured metric values on the client device are very close, then the client device may skip transmitting the measured metric values to the monitoring device; similarly, if a measured metric value is not received by the monitoring device, then the monitoring device knows that the measured metric was similar to the predicted metric on the client device, and accordingly may utilize the predicted metric on the monitoring device. Because transmission of the measured metric values may be skipped, network traffic and interface and processor utilization is significantly decreased.

Abstract: The systems and methods discussed herein provide for network communications via a plurality of paths, responsive to network traffic characteristics such as class, quality of service (QoS) requirements, application, network delay, loss rates, jitter, bandwidth, and application chattiness. Path selection may be application-specific, as one path that is bad or inadequate for the requirements of one application may be good or adequate for the requirements of a second application. By taking into account application-specific communications characteristics, as well as network path characteristics, path selection may be optimized, resulting in higher quality of service for each application, better throughput, and more efficient use of bandwidth and network resources.

Abstract: Described embodiments improve the performance of a computer network using multiplexed application layer streams of network traffic. Multiplexed application layer streams of network traffic from the client to the server can be received via a first transport control protocol (TCP) connection. The multiplexed application layer streams of network traffic can include a first data packet with a first sequence number. The first data packet with the first sequence number can be forwarded to the server via a second TCP connection. A ping frame of an application layer protocol can be transmitted to the client to cause the client to increase a next sequence number. A second data packet can be received from the client with the next sequence number including a second sequence number. The second sequence number of the second data packet can be adjusted to be a third sequence number expected by the second TCP connection.

Abstract: A system for optimizing network traffic is described. The system includes a plurality of appliances, each having an SSL session exchange module. An appliance in active state is called a primary appliance, and one or more appliances in inactive state are called secondary appliances. An appliance of a cluster of appliances comprises a secure session exchange module and one or more network interfaces configured to facilitate a first secure session between a client device and the appliance and a second secure session between the appliance and a server. The secure session exchange module in a primary appliance is configured to provide a message for sending to one or more secondary appliances. The message indicates that the appliance is acting as a primary instance for a server. The secure session exchange module in the primary appliance is also configured to acquire at least one session-related parameter through a handshake procedure for a secure layer with the server.

Abstract: The systems and methods discussed herein provide for faster access to frequently utilized resources through intelligent bandwidth usage-based content pre-fetching. An intelligent acceleration and caching device may monitor bandwidth utilization over a time period and create a regression-based model to predict bandwidth utilization in subsequent time periods. When predicted utilization is below a threshold, the device may pre-fetch frequently accessed content, providing low-latency access and faster performance, without exceeding connection allocation limits.

Abstract: The systems and methods discussed herein provide for faster communications, particularly for high priority traffic, across a distributed network with multiple exit points to a Wide Area Network. Rather than simply routing traffic based on internal or external destination, an intelligent router may measure latency to an endpoint destination via multiple paths, both external and internal, and direct traffic accordingly. Steering high priority traffic via the internal connection to an exit point near the destination server, and then to the server via the external network, may be faster than simply forwarding the connection via the external network from the exit point closest to the source device. Additionally, to reduce bandwidth requirements of the nearby exit point and provide capability for higher priority traffic, low priority traffic may be redirected back via the internal connection and transmitted via a distant exit point.

Abstract: The systems and methods discussed herein provide for a predictive monitoring technique to suppress data exchange between the client device or devices and the monitoring device or devices. Regression-based intelligent predictions systems executed both by the client device or devices and the monitoring device or devices perform identical prediction algorithms. If the predicted metric values and the actual measured metric values on the client device are very close, then the client device may skip transmitting the measured metric values to the monitoring device; similarly, if a measured metric value is not received by the monitoring device, then the monitoring device knows that the measured metric was similar to the predicted metric on the client device, and accordingly may utilize the predicted metric on the monitoring device. Because transmission of the measured metric values may be skipped, network traffic and interface and processor utilization is significantly decreased.

Abstract: A secure session pre-handshake establishment module facilitates a secure session connection request between an appliance and a server associated with a website. The facilitation causes the appliance to receive session information. At least one session to one or more servers listed in a server group is reused if the session information corresponding to the secure session connection request has been cached. Secure session connections between the appliance and servers listed in the server group are formed if the session information corresponding to the secure session connection request has not been cached to pre-establish one or more SSL connections so that when one or more SSL connection requests are received, the one or more pre-established SSL connections can be used without performing full SSL handshake procedures.

Abstract: Disclosed embodiments describe systems and methods for predicting health of a link. A device in communication with a link can identify profile information of a stream of network traffic traversing the link. The device can determine a first prediction of health of the link by applying one or more rules to the plurality of parameters of the profile information. The device can determine a second prediction of health of the link by applying a classifier to one or more timed sequences of the plurality of parameters of the profile information. The device can establishes a respective weight for each of the first prediction of health and the second prediction of heath. The device can select, using the respective weight, between the first prediction of health and the second prediction of health to provide a predictor of the health of the link.

Abstract: A server includes a network interface to interface with mobile computing devices operating within a geographical area, with one of the mobile computing devices providing a request for navigation instructions within the defined geographical area. A geo-connectivity analyzer receives cellular network connectivity metrics for the geographical area, with the cellular network connectivity metric values varying within the geographical area. A network connectivity map is generated by the geo-connectivity analyzer based on the varying cellular network connectivity metrics. The network connectivity map includes areas with strong cellular network connectivity metric values and areas with weak cellular network connectivity metric values. A navigation analyzer generates the navigation instructions between the two geo-locations based on the network connectivity map, with the navigation instructions providing a route that is optimized to include the areas with the strong cellular network connectivity metric values.

Abstract: The present invention is directed towards systems and methods for selecting a path or link from a plurality of links between intermediary devices, based on characteristics of links between the intermediary devices and end nodes of the communication flow. The link choice may be determined from latency, packet drop rates, jitter, congestion, or other characteristics of the links to the end nodes. Link selection may further be based on traffic priority or transport layer quality of service (QoS) requirements of the connection, load balancing requirements, or other such features.

Abstract: Described embodiments provide for dynamically optimizing the number of application layer streams that may be multiplexed into a single transport layer connection, providing the advantages of application layer multiplexing without incurring unnecessary congestion-based network delays. A device may monitor net bandwidth and packet loss rates for a connection, and may dynamically increase and decrease a number of concurrent application layer streams to balance throughput and congestion avoidance. As congestion increases, the device may reduce concurrent stream limits in order to spawn additional transport layer connections, allowing faster congestion recovery and reduced performance impairment.

Abstract: Described embodiments provide systems and methods for initiating establishment of a connection. The system may include a device intermediary between a client and a server. The device may determine at least one server name indicator (SNI) for an application executing on the client and having a secure session established with the server. The device may determine, for each domain name corresponding to the at least one SNI, a session timeout value for the corresponding domain name. The device may send a message to the client according to each session timeout value, to cause the client to initiate establishment of a connection for the corresponding domain name using the secure session.

Abstract: An appliance and a method of pre-establishing SSL session connections for SSL connection establishment are provided. The appliance comprises a secure session pre-handshake establishment module configured to facilitate a secure session connection between an appliance and a server associated with a website, wherein the facilitation causes the appliance to receive session information, determine whether session information corresponding to the secure session connection request has been cached, determine whether the server is associated with a server group based on the determination that session information has not been cached, and form secure session connections between the appliance and servers listed in the server group based on the determination that the server is associated with a server group.

Abstract: The present solution is directed towards systems and methods for prioritizing data streams transmitted between intermediary devices. In some implementations, the system can temporarily reprioritize data streams based on their compression characteristics. The system can also reprioritize the data packets within specific traffic classes and then prioritize each of the individual traffic classes.

Abstract: Disclosed embodiments describe systems and methods for predicting health of a link. A device in communication with a link can identify profile information of a stream of network traffic traversing the link. The device can determine a first prediction of health of the link by applying one or more rules to the plurality of parameters of the profile information. The device can determine a second prediction of health of the link by applying a classifier to one or more timed sequences of the plurality of parameters of the profile information. The device can establishes a respective weight for each of the first prediction of health and the second prediction of heath. The device can select, using the respective weight, between the first prediction of health and the second prediction of health to provide a predictor of the health of the link.

Abstract: Disclosed embodiments describe systems and methods for predicting health of a link. A device in communication with a link can identify profile information of a stream of network traffic traversing the link. The device can determine a first prediction of health of the link by applying one or more rules to the plurality of parameters of the profile information. The device can determine a second prediction of health of the link by applying a classifier to one or more timed sequences of the plurality of parameters of the profile information. The device can establishes a respective weight for each of the first prediction of health and the second prediction of heath. The device can select, using the respective weight, between the first prediction of health and the second prediction of health to provide a predictor of the health of the link.

Abstract: A system for optimizing network traffic is described. The system includes a quality of service (QoS) engine configured to acquire information regarding a plurality of data packets comprising a plurality of data packet flows operating over a plurality of links. The QoS engine can be further configured to determine a flow priority to the plurality of data packets flows, and to determine TCP characteristics for the plurality of data packet flows. The system further includes a TCP controller configured to acquire the flow priority to the plurality of data packets from the QoS engine. The TCP controller can be configured to obtain queue information associated with the plurality of data packets, and adjust a receive window size based on the flow priority and the queue information.

Abstract: This disclosure is directed to embodiments of systems and methods for performing compression of data in a queue. A device intermediary between a client and a server may determine that a length of time to move existing data maintained in a queue from the queue exceeds a predefined threshold. The device may identify, responsive to the determination, a first quantity of the existing data to undergo compression, and a second quantity of the existing data according to a compression ratio of the compression. The device may reserve, according to the second quantity, a first portion of the queue that maintained the first quantity of the existing data, to place compressed data obtained from applying the compression on the first quantity of the existing. The device may place incoming data into the queue beyond the reserved first portion of the queue.

Abstract: Described embodiments establish at least one secure connection for a session. An intermediary device may intercept a domain name service (DNS) request from a client. The device may determine, according to the intercepted DNS request and configuration data of the device, that the client is preparing to establish a session with a server. The device may send a client hello message of the device to the server for establishing a first secure connection between the device and the server for the session, prior to the client sending a client hello message of the client for establishing a second secure connection between the client and the device for the session. The second secure connection may be established between the client and the device using a specified value for a session identifier received from the server in response to the client hello message of the device.