Cloudflare, Inc.

Messageone, Inc.

Groupon, Inc.

Dane Orion Knecht

John Graham-Cumming

Lee Hahn Holloway

Matthew Browning Prince

Ray Raymond Bejjani

Albertus Strasheim

Sébastien Andreas Henry Pahl

Piotr Sikora

Matthieu Philippe François Tourne

Nicholas Thomas Sullivan

Dani Grant

Christopher Philip Branch

Igor Postelnik

Marek Przemyslaw Majkowski

Samy Mahmoud Aboel-Nil

Christopher Stephen Joel

Oliver Zi-gang Yu

Kenton Taylor Varda

Kyle Kloepper

Tom Paseka

Zachary Aaron Bloom

Ingvar Stepanyan

Scott B Kovner

Rustam Xing Lalkaka

Eric Reeves

Braden Michael Ehrat

Sergi Isasi

Dina Kozlov

Killian Koenig

James Howard Royal

Michael Jonas Sofaer

Martin Tobias

Zi Lin

Oliver Yu

Ryan Lackey

Matthieu Phillippe François Tourne

Nitin Rao

John Fawcett

Patrick Donahue

Patrick A Meenan

Andrew Taylor Plunk

Yoav Moshe

Michelle Chen

Celso Martinho

Simona Andreea Badoiu

Matthieu Philippe Francois Tourne

Sebastian Andreas Henry Pahl

Lee Hahn Halloway

A compute server of a distributed cloud computing network receives an inference request that is directed to an AI model hosted at a destination external to the distributed cloud computing network. The compute server determines that the inference request satisfies security rules associated with the AI model. Upon determining that the inference request is not answerable from a cache, the compute server transmits the inference request to the AI model hosted at the external destination. The compute server receives an inference response from the AI model in response to the inference request, transmits the inference response, and stores the inference request and the inference response in cache.

Managing artificial intelligence inference requests that are directed to an AI model external to a distributed cloud computing network

An edge server of a distributed edge compute and routing service receives a tunnel connection request from a tunnel client residing on an origin server, that requests a tunnel be established between the edge server and the tunnel client. The request identifies the hostname that is to be tunneled. An IP address is assigned for the tunnel. DNS record(s) are added or changed that associate the hostname with the assigned IP address. Routing rules are installed in the edge servers of the distributed edge compute and routing service to reach the edge server for the tunneled hostname. The edge server receives a request for a resource of the tunneled hostname from another edge server that received the request from a client, where the other edge server is not connected to the origin server. The request is transmitted from the edge server to the origin server over the tunnel.

Establishing and using a tunnel from an origin server in a distributed edge compute and routing service

The present invention discloses a system and method for data management whereby a data management application manages data across a managed service environment, a mail server environment, and a client environment. The present invention allows a customer to optimize data management functions such as archiving, recovering, monitoring, authenticating, synchronizing, transferring, copying, stubbing, chunking, harvesting, and securing.

System and method for managing data across multiple environments

A map of IP addresses of a distributed cloud computing network to one or more groupings is stored. The IP addresses are anycast IP addresses for which compute servers of the distributed cloud computing network share. These IP addresses are to be used as source IP addresses when transmitting traffic to destinations external to the cloud computing network. The map is made available to external destinations. Traffic is received at the distributed cloud computing network that is destined to an external destination. An IP address is selected based on the characteristic(s) applicable for the traffic and the map. The distributed cloud computing network transmits the traffic to the external destination using the selected IP address.

Selection of an egress IP address for egress traffic of a distributed cloud computing network

A compute server receives a request that triggers execution of a code piece out of multiple code pieces. A single process at the compute server executes the code piece, which is run in an isolated execution environment. Each other code piece runs in other isolated execution environments respectively and executed by the single process. The code piece, when executed, modifies a response to the request. The response is generated based at least in part on the executed code piece. The generated response is transmitted.

Cloud computing platform that executes code in a distributed cloud computing network

A server establishes a secure session with a client device where a private key used in the handshake is stored in a different server. An encrypted connection is established between the first server and the second server. A message is received from the client device that initiates a procedure to establish the secure session between the client device and the first server. As part of this procedure, the first server transmits over the encrypted connection a request to the second server to use the private key. The first server receives, over the encrypted connection, a response to the request that includes a result of the use of the private key. The first server uses the result during the procedure to establish the secure session.

Secure session capability using public-key cryptography without access to the private key

A tunnel is established between a first edge server of a distributed edge compute and routing service and a tunnel client residing on an origin server. Routing rules are installed in the edge servers of the distributed edge compute and routing service to reach the first edge server. The routing rules are based at least in part on traffic information gathered from processing other traffic that traverses the distributed edge compute and routing service. A request for content served by the origin server through the tunnel is received at a second edge server of the distributed edge compute and routing service. A path from the second edge server to the first edge server is determined based on the routing rules. The request is transmitted on the determined path. The first edge server receives the request and transmits the request to the origin server over the tunnel.

A server receives from a browser executing on a client device an HTTP request. The server transmits a response to the HTTP request to the browser. The response includes code that when executed by the browser, executes a non-HTTP layer 7 protocol client that communicates with a non-HTTP layer 7 protocol service at an external network. The server receives, from the non-HTTP layer 7 protocol client executing in the browser, data related to the non-HTTP layer 7 protocol service. The server proxies the data related to the non-HTTP layer 7 protocol service over a layer 4 tunnel that is interfaced with the non-HTTP layer 7 protocol service. The server logs event data received from the non-HTTP layer 7 protocol client executing in the browser.

Non-HTTP layer 7 protocol applications running in the browser

Traffic optimization in virtual private networks (VPNs) is described. A client device establishes a first VPN connection with a first server according to a first VPN route configuration that specifies a first VPN route to the first server. Flow(s) of traffic is forwarded through the first VPN connection to the first server. The client device receives a second VPN route configuration that specifies a second VPN route to a second server of the plurality of servers for establishing a second VPN connection, where the second VPN connection satisfies a set of traffic optimization criteria. The client device establishes the second VPN connection with the second server according to the second VPN route configuration. Traffic is forwarded through the second VPN connection to the second server.

Method and apparatus for traffic optimization in virtual private networks (VPNs)

A compute server receives a first request from a client device that triggers execution of a first third-party code piece. The first request is directed to a first zone. A single process at the compute server executes the first third-party code piece. As a result of executing the first third-party code piece, a second request is generated that triggers execution of a second third-party code piece. The second request is directed to a second zone. The single process executes the second third-party code piece. A response is generated to the first request based at least in part on the executed first third-party code piece and the executed second third-party code piece. The generated response is transmitted to the client device.

Cloud computing platform that executes third-party code in a distributed cloud computing network

A server in a content delivery network (CDN) receives a request for a web page of a domain handled by an origin server. The server retrieves the web page and the web page references a video. The server retrieves a file that indicates a list of locations of the domain in which segments of the video are located. The server fetches at least an initial portion of the segments. The server receives a request for the video. The server transmits to the requester at least the initial portion of the segments. The server receives a subsequent request of a different portion of the segments. The server transmits a response to the requester that instructs the requester to transmit the request for the different portion of segments to a second server in the CDN.

Delivering video in a content delivery network

A request for a web page is received at a proxy server. The request originates from a client network application of a client device. The requested web page includes multiple references to multiple images. The proxy server retrieves the requested web page. The proxy server modifies code of the retrieved web page such that the client network application will not, for each one of those images, initially request those images when parsing the page. The proxy server also adds code to the retrieved web page that, when executed by the client network application, causes at least two of the images to be requested with a single request. The proxy server transmits the modified web page to the client device.

Method and apparatus for automatically optimizing the loading of images in a cloud-based proxy service

Prospective deals for a deal vendor's deal inventory may be scored according to one or more population-specific expected-yield scores, such as expected revenue yield, expected new customers yield, and the like. A prospective deal is categorized and characterized according to a number of yield-related characteristics. Some or all of the prospective deal's characteristics are mapped to yield components derived from completed deals that have been offered to a particular population. An expected-yield score for a prospective deal with regard to that population is obtained by combining the mapped yield components.

Deal scoring system and method

Growing community of inventors

San Francisco, CA, United States of America

Dane Orion Knecht