Abstract: Allowing an app having access to hidden resources on a device to present third party media to the device user via that app such that requests included in the third party media which require access to hidden resources can be fulfilled without requiring further permission by the user. In one embodiment, a third party advertisement is presented to a user via an app that has been enabled by the user. The enabled app is pre-approved by the user, and by any authorizing organization, to access hidden resources, such as camera, recorder, and personal data. In this manner, third party requests that require access to such hidden data can control such access without requiring further action by the user.

Abstract: The invention relates to an architecture that facilitates load balancing among a plurality of hosts and preserve session affinity to a given host. An incoming stream of data packets that include packet sessions is input to one or more forwarding mechanisms for forwarding to one or more hosts. The forwarders generate a routing function that takes into consideration host availability, and distributes session packets according to the routing function. A session is distributed to the same host to preserve session affinity. When host availability changes, a new routing function is generated, such that any new session is routed according to the new routing function and existing sessions are routed according to the old routing function. When the old routing function becomes irrelevant, it is phased out. An optimization utilizes a maximally backward compatible hash function to minimize the differences between the old and new routing functions.

Abstract: A system and methods for carrying out point-to-point intracluster communications between hosts is provided. The disclosed system enables communication protocol layer components of hosts within a cluster to continue to operate in a cluster mode while facilitating such point-to-point communications. Initially, address discovery provides the non-cluster mode address for a target host. Thereafter, an initiating/source host issues a message including the non-cluster mode address of the target host. A network load balancing layer, or any other suitable component within the target host, intercepts the message and substitutes a cluster address for the non-cluster mode address within the message destination field before the message is presented to the communication protocol layer of the target host.

Abstract: In an exemplary device implementation, a device includes: a connection migrator that is configured to migrate connections away from the device; the connection migrator capable of precipitating a compilation of protocol state for a connection across a protocol stack; the connection migrator adapted to aggregate the compiled protocol state with data for the connection into an aggregated connection state; the connection migrator further capable of causing the aggregated connection state to be sent toward a target device. In an exemplary media implementation, processor-executable instructions direct a device to perform actions including: obtaining at least a portion of a source/destination pair from a packet; accessing an encapsulation mapping table using the at least a portion of the source/destination pair to locate an encapsulation mapping entry; extracting a flow identifier from the encapsulation mapping entry; and replacing part of the packet with the flow identifier to produce an encapsulated packet.