Abstract: A computer program product, system, and computer implemented method for application-level redirect trapping and creation of NAT mapping to work with routing infrastructure for private connectivity in cloud and customer networks. The approach disclosed herein generally comprises a method of leveraging a reverse connection endpoint and IP address mapping controller to capture redirection messages from a private cloud or network (e.g., a service consumer network or a service consumer hybrid cloud). This allows at least the IP address mapping controller to manage a cloud networking infrastructure to provide for a service provider network (e.g., a public cloud) to support applications that overcome the isolation requirements of a private cloud or network to perform useful work. For example, without saddling the private cloud or network user with a heavy pre-configuration burden, the approach disclosed herein supports redirection to dynamically determined IP addresses at the private cloud or network.

Abstract: A computer program product, system, and computer implemented method for application-level redirect trapping and creation of NAT mapping to work with routing infrastructure for private connectivity in cloud and customer networks. The approach disclosed herein generally comprises a method of leveraging a reverse connection endpoint and IP address mapping controller to capture redirection messages from a private cloud or network (e.g., a service consumer network or a service consumer hybrid cloud). This allows at least the IP address mapping controller to manage a cloud networking infrastructure to provide for a service provider network (e.g., a public cloud) to support applications that overcome the isolation requirements of a private cloud or network to perform useful work. For example, without saddling the private cloud or network user with a heavy pre-configuration burden, the approach disclosed herein supports redirection to dynamically determined IP addresses at the private cloud or network.

Abstract: Described is an improved approach to ensure high availability for established sessions (e.g., application layer sessions) over network connections that negotiates and renegotiates encryption keys (e.g., TLS/SSL) at clean boundaries to ensure in-transit data are properly handled during migration of an application (e.g., a reverse proxy server instance). Connected TCP sessions may be handed off to another application (e.g., from existing proxy server to new/upgraded proxy server) and after establishing a new TLS session with a new encryption key, data transfer may be resumed between a client and a server using the new/upgraded application in a client-server architecture.

Abstract: Described is an improved approach to ensure high availability for established sessions (e.g., application layer sessions) over network connections that negotiates and renegotiates encryption keys (e.g., TLS/SSL) at clean boundaries to ensure in-transit data are properly handled during migration of an application (e.g., a reverse proxy server instance). Connected TCP sessions may be handed off to another application (e.g., from existing proxy server to new/upgraded proxy server) and after establishing a new TLS session with a new encryption key, data transfer may be resumed between a client and a server using the new/upgraded application in a client-server architecture.

Abstract: The techniques are provided automatically detecting when performing pre-transmission compression on data to be sent over a network connection will be preferable to sending the data uncompressed, and for automatically performing pre-transmission compression only when doing so is determined to be beneficial. The techniques involve performing compression on sample data. The time it takes to perform the compression on the sample data, along with the reduction in size achieved by the compression, are factors used to automatically determine whether compressing data before sending the data over a network connection will achieve better results that sending the data uncompressed. In some embodiments, multiple compression algorithm/compression level combinations are tested at different points in the transmission. At each point, the sending device may switch to the algorithm/level combination that is producing the best results on the current sample.

Abstract: The techniques are provided automatically detecting when performing pre-transmission compression on data to be sent over a network connection will be preferable to sending the data uncompressed, and for automatically performing pre-transmission compression only when doing so is determined to be beneficial. The techniques involve performing compression on sample data. The time it takes to perform the compression on the sample data, along with the reduction in size achieved by the compression, are factors used to automatically determine whether compressing data before sending the data over a network connection will achieve better results that sending the data uncompressed. In some embodiments, multiple compression algorithm/compression level combinations are tested at different points in the transmission. At each point, the sending device may switch to the algorithm/level combination that is producing the best results on the current sample.

Abstract: Systems, methods, and other embodiments associated with set transparent network communication are described. In one embodiment, in response to receiving a listen signal from a listen requestor, where the listen signal contains a handle identifying a set of interfaces from which the listen requestor is configured to receive incoming network communications: a set of listening endpoints are opened, where a member of the set of listening endpoints is associated with a member of the set of interfaces. The handle is modified to produce a modified handle that identifies the set of listening endpoints. The modified handle facilitates set transparent communication between the listen requester and a member of the set of listening endpoints. The modified handle is provided to the listen requester.

Abstract: Systems, methods, and other embodiments associated with set transparent network communication are described. In one embodiment, in response to receiving a listen signal from a listen requestor, where the listen signal contains a handle identifying a set of interfaces from which the listen requestor is configured to receive incoming network communications: a set of listening endpoints are opened, where a member of the set of listening endpoints is associated with a member of the set of interfaces. The handle is modified to produce a modified handle that identifies the set of listening endpoints. The modified handle facilitates set transparent communication between the listen requester and a member of the set of listening endpoints. The modified handle is provided to the listen requester.