Abstract: Various embodiments include network computing devices and methods for managing Domain Name Service (DNS) over Hypertext Transfer Protocol Secure (DoH). A processor of a network computing device may receive from a client computing device a DoH request comprising a public certificate associated with a client identifier. The processor may generate a fingerprint of the public certificate. The processor may obtain a client-specific DoH policy based on an association between the fingerprint of the public certificate and the client-specific DoH policy. The processor may apply the DoH policy to the DoH request to formulate a response to the DoH request.

Abstract: Disclosed herein are methods and systems for access point device recovery and management using mobile devices. The method includes providing, by a mobile device to an access point device via a service provider system, authentication details of the mobile device, establishing a secure wireless connection using the authentication details between the access point device and the mobile device upon receiving, by the mobile device, an indication of failure of a network connection between the service provider system and the access point device, sending, by the mobile device to the access point device over the secure wireless connection, a configuration instruction, receiving, by the mobile device from the access point device over the secure wireless connection, confirmation of the configuration instruction, and disconnecting the secure connection upon successful application of the configuration instruction.

Abstract: Various embodiments describe methods, systems, and devices for distributing trigger-based function execution in a mesh network. Various embodiments receive a trigger designation that identifies a plurality of preestablished triggers used to initiate an action controlling an operation associated with a client device connected to the mesh network. A trigger subscription may be transmitted that causes hardware associated with each of the plurality of nodes to be configured to detect and report when any one of the plurality of preestablished triggers is detected by any one of the plurality of nodes, wherein the trigger subscription includes an update to a trigger list that identifies a designated node among the plurality of nodes that is configured to execute application logic for initiating at least one action controlling the operation associated with the client device connected to the mesh network, wherein the client device is remote from the designated node.

Abstract: Various embodiments describe methods, systems and devices for distributing trigger-based function execution in a mesh network. Various embodiments include detecting a trigger and determining whether the detected trigger matches one of a plurality of network events included in a trigger list accessible to the detecting node. In addition, whether a node associated with the detected trigger is available may be determined in response to determining the detected trigger matches one of the plurality of network events included in the trigger list. The node associated with the detected trigger may be configured to execute application logic for initiating at least one action from the mesh network in response to the detected trigger being detected. A trigger detection indicator associated with the detected trigger may be transmitted in response to determining the node associated with the detected trigger is a node other than the detecting node that is available.

Abstract: Disclosed herein are methods and systems for access point device recovery and management using mobile devices. The method includes providing, by a mobile device to an access point device via a service provider system, authentication details of the mobile device, establishing a secure wireless connection using the authentication details between the access point device and the mobile device upon receiving, by the mobile device, an indication of failure of a network connection between the service provider system and the access point device, sending, by the mobile device to the access point device over the secure wireless connection, a configuration instruction, receiving, by the mobile device from the access point device over the secure wireless connection, confirmation of the configuration instruction, and disconnecting the secure connection upon successful application of the configuration instruction.

Abstract: Various embodiments include network computing devices and methods for managing Domain Name Service (DNS) over Hypertext Transfer Protocol Secure (DoH). A processor of a network computing device may receive from a client computing device a DoH request comprising a public certificate associated with a client identifier. The processor may generate a fingerprint of the public certificate. The processor may obtain a client-specific DoH policy based on an association between the fingerprint of the public certificate and the client-specific DoH policy. The processor may apply the DoH policy to the DoH request to formulate a response to the DoH request.

Abstract: Disclosed herein are methods and systems for access point device recovery and management using mobile devices. The method includes providing, by a mobile device to an access point device via a service provider system, authentication details of the mobile device, establishing a secure wireless connection using the authentication details between the access point device and the mobile device upon receiving, by the mobile device, an indication of failure of a network connection between the service provider system and the access point device, sending, by the mobile device to the access point device over the secure wireless connection, a configuration instruction, receiving, by the mobile device from the access point device over the secure wireless connection, confirmation of the configuration instruction, and disconnecting the secure connection upon successful application of the configuration instruction.

Abstract: Routing network traffic using router-terminated virtual private network (VPN) client sessions is disclosed herein. In one embodiment, a router computing device receives an indication of an association between a client computing device and VPN configuration data for a VPN, the indication comprising an identifier of the client computing device and the VPN configuration data. The router computing device binds a VPN client session instantiated by the router computing device to a network interface and implements a firewall rule to route network traffic to and from the client computing device via the network interface. The router computing device establishes a connection with the VPN using the VPN client session and the VPN configuration data. Finally, the router computing device receives network traffic for the client computing device and routes the network traffic via the network interface.

Abstract: Disclosed herein are methods and systems for access point device recovery and management using mobile devices. The method includes providing, by a mobile device to an access point device via a service provider system, authentication details of the mobile device, establishing a secure wireless connection using the authentication details between the access point device and the mobile device upon receiving, by the mobile device, an indication of failure of a network connection between the service provider system and the access point device, sending, by the mobile device to the access point device over the secure wireless connection, a configuration instruction, receiving, by the mobile device from the access point device over the secure wireless connection, confirmation of the configuration instruction, and disconnecting the secure connection upon successful application of the configuration instruction.

Abstract: Various embodiments describe methods, systems and devices for distributing trigger-based function execution in a mesh network. Various embodiments include detecting a trigger and determining whether the detected trigger matches one of a plurality of network events included in a trigger list accessible to the detecting node. In addition, whether a node associated with the detected trigger is available may be determined in response to determining the detected trigger matches one of the plurality of network events included in the trigger list. The node associated with the detected trigger may be configured to execute application logic for initiating at least one action from the mesh network in response to the detected trigger being detected. A trigger detection indicator associated with the detected trigger may be transmitted in response to determining the node associated with the detected trigger is a node other than the detecting node that is available.